An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the Security component, which allows remote attackers to spoof certificates via unspecified vectors.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Iphone_os | Apple | * | 10.1.1 (including) |
Potential Mitigations
Related Attack Patterns
References
- http://www.securityfocus.com/bid/94905
- http://www.securitytracker.com/id/1037469
- https://support.apple.com/HT207422
- https://support.apple.com/HT207423
- https://support.apple.com/HT207487
- http://www.securityfocus.com/bid/94905
- http://www.securitytracker.com/id/1037469
- https://support.apple.com/HT207422
- https://support.apple.com/HT207423
- https://support.apple.com/HT207487