CVE-2016-6562

Опубликовано: 13 июл. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 2.9

EPSS Низкий

Описание

On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position to perform MITM attacks may be able to obtain sensitive account information such as login credentials.

Ссылки

https://www.info-sec.ca/advisories/ShoreTel-Mobility.html
Third Party Advisory
https://www.kb.cert.org/vuls/id/475907
Third Party Advisory
US Government Resource
https://www.securityfocus.com/bid/95224
Third Party Advisory
VDB Entry
https://www.info-sec.ca/advisories/ShoreTel-Mobility.html
Third Party Advisory
https://www.kb.cert.org/vuls/id/475907
Third Party Advisory
US Government Resource
https://www.securityfocus.com/bid/95224
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mitel:shortel_mobility_client:9.1.3.109:*:*:*:*:android:*:*

cpe:2.3:a:mitel:shortel_mobility_client:9.1.3.109:*:*:*:*:iphone_os:*:*

EPSS

Процентиль: 27%

0.00097

Низкий

7.5 High

CVSS3

2.9 Low

CVSS2

Дефекты

CWE-295

Связанные уязвимости

GHSA-gp9v-8hxx-pqxm