Security Advisory

CVE-2016-10511

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-09-18 21:00:00

Last updated 2024-08-06 03:21:52

Assigner hackerone

CVSS score not scored

State PUBLISHED

Description

The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitting man-in-the-middle attackers the ability to view an application-only OAuth client token and potentially enable unreleased Twitter iOS app features.

← Browse all CVEs View on cve.org ↗