NVD

Id
18518  
Name
CVE-2016-2268  
Description
Dell SecureWorks app before 2.1 for iOS does not validate SSL certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-02-08  
Modified Date
2016-03-10  
Seq
2016-2268  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102839 18518 CVE-2016-2268 http://packetstormsecurity.com/files/135617/Dell-SecureWorks-iOS-Certificate-Validation-Failure.html  View
102840 18518 CVE-2016-2268 20160203 Dell SecureWorks iOS Application - MITM SSL Certificate Vulnerability  View
102841 18518 CVE-2016-2268 http://www.info-sec.ca/advisories/Dell-SecureWorks.html  View
102842 18518 CVE-2016-2268 20160203 Dell SecureWorks iOS Application - MITM SSL Certificate Vulnerability  View
102843 18518 CVE-2016-2268 https://itunes.apple.com/us/app/dell-secureworks/id533072046  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
865 JVNDB-2016-001638 Apple iOS 用 Dell SecureWorks モバイルアプリケーションにおけるサーバになりすまされる脆弱性 Apple iOS 用 Dell SecureWorks モバイルアプリケーションは、SSL 証明書を検証しないため、サーバになりすまされ、重要な情報を取得される脆弱性が存在します。 CVE-2016-2268 88774 CVE-2016-2268 18518 5.8 6.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001638.html 2016-02-02 2016-06-01 View