CVE-2017-2498

EUVD-2017-11681
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the "Security" component. It allows attackers to bypass intended access restrictions via an untrusted certificate.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 30%
Affected Products (NVD)
VendorProductVersion
appleiphone_os
𝑥
≤ 10.3.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/98479
http://www.securitytracker.com/id/1038485
https://support.apple.com/HT207798
http://www.securityfocus.com/bid/98479
http://www.securitytracker.com/id/1038485
https://support.apple.com/HT207798