CVE-2015-6999 | BDVDB-2026-72489 Detail

Description#

The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a valid certificate by leveraging access to a revoked certificate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html
https://support.apple.com/HT205370
http://www.securitytracker.com/id/1033929
http://www.securityfocus.com/bid/77268

Exploit#

No public exploit known

History#

Version 12015-10-23Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.