CVE-2015-6999

Published: Oct 23, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a valid certificate by leveraging access to a revoked certificate.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

APPLE-SA-2015-10-21-1

vendor-advisory

x_refsource_APPLE

https://support.apple.com/HT205370

x_refsource_CONFIRM

1033929

vdb-entry

x_refsource_SECTRACK

77268

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2015-6999

Description

Affected Products

References