Beveiligingsadvies

CVE-2011-0228

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-08-29 20:00:00

Laatst bijgewerkt 2024-08-06 21:43:15

Toegewezen door apple

CVSS-score geen score

Status PUBLISHED

Beschrijving

The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an arbitrary domain.

← Alle CVE's bekijken Bekijk op cve.org ↗