CVE-2012-1326

HIGH

Cisco IronPort Web Security Appliance <= 7.5 - Improper Certificate Validation

Title source: llm

Description

Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry x_refsource_misc

http://www.securityfocus.com/bid/52981

Vendor Advisory x_refsource_confirm

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120412-CVE-2012-1326

Scores

CVSS v3 7.4

EPSS 0.0066

EPSS Percentile 47.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-20

Status published

Products (1)

cisco/ironport_web_security_appliance < 7.5

Published Jan 15, 2020

Tracked Since Feb 18, 2026