Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-6562

ShoreTel Mobility Client for iOS and Android, version 9.1.3.109 and earlier, fails to properly validate SSL certificates provided by HTTPS connections

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
certcc

Description

On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position to perform MITM attacks may be able to obtain sensitive account information such as login credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ShoreTel Mobility Client iOS

  • 9.1.3.109 to ≤ 9.1.3.109affected

ShoreTel Mobility Client Andoid

  • 9.1.3.109 to ≤ 9.1.3.109affected

References