Unscored CVE-2016-6231 EUVD-2016-7162GHSA-jf7f-x93v-jf47

Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to ob…

Published Aug 25, 2016 · Updated Aug 6, 2024 · Assigned by mitre

Description

Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

References

http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.html
92200 vdb-entry
https://support.kaspersky.com/vulnerability.aspx?el=12430#280716
20160801 Kaspersky Safe Browser iOS Application - MITM SSL Certificate Vulnerability (CVE-2016-6231) mailing-list
20160805 Kaspersky Safe Browser iOS Application - MITM SSL Certificate Vulnerability (CVE-2016-6231) mailing-list