high7.5
CVE-2016-1766
The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via u…
Impact
The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | through 9.2.1 |
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
- http://www.securitytracker.com/id/1035353
- http://www.zerodayinitiative.com/advisories/ZDI-16-314
- https://support.apple.com/HT206166
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
- http://www.securitytracker.com/id/1035353
- http://www.zerodayinitiative.com/advisories/ZDI-16-314
- https://support.apple.com/HT206166