Numerous enterprise VPN clients could be vulnerable to a potentially serious security weakness that could be used to spoof access by replaying a user’s session, an alert from the Carnegie Mellon University CERT Coordination Center (CERT/CC) has warned. Connecting to an enterprise VPN gateway made by a specific company usually requires a dedicated application designed to work with it.

Read full article on Naked Security