Published: 31/08/2013 Updated: 17/02/2020

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

VMScore: 516

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Palo Alto Networks GlobalProtect prior to 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle malicious users to spoof portal servers and obtain sensitive information via a crafted certificate.

Vulnerable Product	Search on Vulmon	Subscribe to Product
paloaltonetworks netconnect -
paloaltonetworks globalprotect

An illustration of using EPSS to build a Risk Register

I've written more about this in the projects section of my site: wwwbagheeralabscom EPSSRiskRegister EPSS The EPSS model produces a probability score between 0 and 1 (0 and 100%) The higher the score, the greater the probability that a vulnerability will be exploited wwwfirstorg/epss/ A Cybersecurity Asset Risk Register is to systematically identify,

CWE-310 http://archives.neohapsis.com/archives/bugtraq/2012-10/0100.html https://security.paloaltonetworks.com/CVE-2012-6606 https://nvd.nist.gov https://github.com/BagheeraAltered/EPSSRiskRegister

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-6606

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect