CVE Vulnerabilities

CVE-2017-2498

Improper Certificate Validation

Published: May 22, 2017 | Modified: Apr 20, 2025
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the Security component. It allows attackers to bypass intended access restrictions via an untrusted certificate.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

NameVendorStart VersionEnd Version
Iphone_osApple*10.3.1 (including)

Potential Mitigations

References