Vulnetix
Try Vulnetix Request Demo
CVE-2015-6997 PUBLISHED CVSS 4.300000190734863 MEDIUM

The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.

EPSS 0.25% · 48.1th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
0.25%
48.1th percentile

Affected Products

VendorProductVersions
appleiphone_os0
n/an/an/a
applewatchos0

Timeline

References

Open in Interactive Console →