Vulnerability in Apple Mac Os X
CVE-2013-1124
The Cisco Network Admission Control (NAC) agent on Mac OS X does not verify the X.509 certificate of an Identity Services Engine (ISE) server during an SSL session, which allows man-in-the-middle attackers to spoof ISE servers via an arbitrary certificate, aka Bug ID CSCub24309.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.005 (41.5th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Cisco Network_admission_control
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)