Web VPN solutions circumvent browser security model
US-CERT has stated that clientless SSL VPN products from various vendors circumvent browser same origin policies, allowing theft of cookies and access data
Go to Source
More Informations:
US-CERT has stated that clientless SSL VPN products from various vendors circumvent browser same origin policies, allowing theft of cookies and access data
Go to Source