CVE-2016-6231

Опубликовано: 25 авг. 2016

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

Ссылки

http://seclists.org/fulldisclosure/2016/Aug/30
Third Party Advisory
VDB Entry
http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.html
Third Party Advisory
http://www.securityfocus.com/archive/1/539071/100/0/threaded
http://www.securityfocus.com/bid/92200
https://support.kaspersky.com/vulnerability.aspx?el=12430#280716
Third Party Advisory
http://seclists.org/fulldisclosure/2016/Aug/30
Third Party Advisory
VDB Entry
http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.html
Third Party Advisory
http://www.securityfocus.com/archive/1/539071/100/0/threaded
http://www.securityfocus.com/bid/92200
https://support.kaspersky.com/vulnerability.aspx?el=12430#280716
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kaspersky:safe_browser:*:*:*:*:*:iphone_os:*:*

Версия до 1.6.0 (включая)

EPSS

Процентиль: 37%

0.00158

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-jf7f-x93v-jf47

CVSS3: 5.9

github

больше 3 лет назад