An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which allows remote attackers to spoof certificates via unspecified vectors.
The product does not validate, or incorrectly validates, a certificate.
Link | Tags |
---|---|
https://support.apple.com/HT207487 | vendor advisory |
https://support.apple.com/HT207422 | vendor advisory |
http://www.securityfocus.com/bid/94905 | vdb entry third party advisory |
http://www.securitytracker.com/id/1037469 | vdb entry |
https://support.apple.com/HT207423 | vendor advisory |