VPN software from Cisco Systems, Juniper and others make users susceptible to Web-based attacks, according to an advisory from the U.S. Computer Emergency Readiness Team.
Read the rest here:
US CERT warns of clientless SSL VPN vulnerability (SearchSecurity.com)