CVE-2016-6562CWE-295

ShoreTel Mobility Client for iOS and Android, version 9.1.3.109 and earlier, fails to properly validate SSL certificates provided by HTTPS connections

published July 13, 2018

CVSS
—
EPSS
0%
Percentile
36.6
In the wild
Unconfirmed
What it is

On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position to perform MITM attacks may be able to obtain sensitive account information such as login credentials.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00437 · 36.6th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2018-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    ShoreTel Mobility Client for iOS and Android, version 9.1.3.109 and earlier, fails to properly validate SSL certificates provided by HTTPS connections
    cvelistv5