CVE-2012-6606 Man-in-the-middle Vulnerability in GlobalProtect App
Attack Vector
NETWORK
Scope
UNCHANGED
Attack Complexity
HIGH
Confidentiality Impact
HIGH
Privileges Required
NONE
Integrity Impact
HIGH
User Interaction
REQUIRED
Availability Impact
NONE
Description
A vulnerability exists in NetConnect (all version) and GlobalPortect App (1.1.6 and earlier) whereby the agent does not verify the certificate presented by the portal server, enabling a possible Man-in-the-middle attack.
This vulnerability can result in an agent connecting to an attacker-controlled server allowing the attacker to receive the username and password of the affected user.
This issue affects NetConnect (all versions); GlobalProtect App (1.1.6 and earlier).
Product Status
| Versions | Affected | Unaffected |
|---|---|---|
| GlobalProtect App 1.1 | <= 1.1.6 | >= 1.1.7 |
| NetConnect | All | None |
Severity: MEDIUM
CVSSv3.1 Base Score: 6.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Weakness Type
Solution
GlobalProtect app 1.1.7 and later; NetConnect is discontinued.
Workarounds and Mitigations
No mitigations available.