Cisco Security Advisory – The Cisco Security Monitoring, Analysis and Response System (CS-MARS) and the Cisco Adaptive Security Device Manager (ASDM) do not validate the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) certificates or Secure Shell (SSH) public keys presented by devices they are configured to connect to. Malicious users may be able to use this lack of certificate or public key validation to impersonate the devices that these affected products connect to, which could then be used to obtain sensitive information or misreport information.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/53791/cisco-sa-20070118-certs.txt
Source: https://packetstormsecurity.com/files/53791/Cisco-Security-Advisory-20070118-certs.html