VDB

GCVE-110-CERTCC-2016-475907

GCVE-110-CERTCC-2016-475907
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published January 3, 2017
ShoreTel Mobility Client for iOS and Android, version 9.1.3.109 and earlier, fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.
Download JSON Open in Console

Risk Scores

CVSS 2.0
7.8/10
High · AV:A/AC:L/Au:N/C:C/I:C/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact2d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score7remediation_levelWreport_confidenceCenvironmental_score1.7531043031992target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2016-6562

References

ShoreTel Mobility Client mobile application does not verify SSL certificates
url
ShoreTel Mobility Client mobile application does not verify SSL certificates
url
ShoreTel Mobility Client mobile application does not verify SSL certificates
url
ShoreTel Mobility Client mobile application does not verify SSL certificates
url
ShoreTel Mobility Client mobile application does not verify SSL certificates
advisory

Browse GCVE Records

72,409 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›