Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacksReferenceshttp://www.securityfocus.com/bid/52981https://www.secureworks.com/research/transitive-trust
