Improper input validation in Cisco Ip_communicator

CVE-2012-2490

Cisco IP Communicator 8.6 allows man-in-the-middle attackers to modify the Certificate Trust List via unspecified vectors, aka Bug ID CSCtz01471.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.005 (40.7th percentile) — read the EPSS interpretation.

Affected products

Cisco Ip_communicator — versions 8.6
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)