Security Advisory

CVE-2019-16263

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-10-07 11:19:26

Last updated 2024-08-05 01:10:41

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Although the certificate chain must contain one of a set of pinned certificates, there are certain implementation errors such as a lack of hostname verification. NOTE: this is an end-of-life product.

← Browse all CVEs View on cve.org ↗