CVE Database
/

CVE-2017-6988

Back to search

CVE-2017-6988

Published: May 22, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "802.1X" component. It allows remote attackers to discover the network credentials of arbitrary users by operating a crafted network that requires 802.1X authentication, because EAP-TLS certificate validation mishandles certificate changes.

VendorProductVersions

n/a

n/a

affected
n/a

References

1038484
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now