CVE-2011-3253 in iOS

Riassunto

di MITRE

CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 19/08/2011
• Divulgazione: 14/10/2011
• Moderazione: accettato
• Voce: VDB-59063
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 2.6 (NVD)
• EPSS: 0.00566
• KEV: no
• Attività: molto basso
• Settore: Police, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-3253
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-3253
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-3253/