Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2023-3615

Lack of server certificate validation in websockets connection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mattermost

Description

Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost iOS app

Default version status: unaffected

  • 0 to ≤ 2.5.0affected
  • 2.5.1unaffected

References