Skip to content
OpenAdvisories
Unscored CVE-2017-2380 EUVD-2017-11563GHSA-jcc8-w2rf-px23

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the Simple Certificate Enrollment Protoc…

Published Apr 2, 2017 · Updated Aug 5, 2024 · Assigned by apple

Description

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the Simple Certificate Enrollment Protocol (SCEP) implementation in the "Profiles" component. It allows remote attackers to bypass cryptographic protection mechanisms by leveraging DES support.

References