PT-2017-10054 · Trend Micro · Trend Micro Enterprise Mobile Security

Publicado 2017-03-31 · Atualizado 2017-04-04 · CVE-2016-9319

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Enterprise Mobile Security versions prior to 9.7.1193

Description The issue concerns a missing SSL certificate validation in the Android application.

Recommendations For versions prior to 9.7.1193, update to version 9.7.1193 or later to resolve the issue.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2016-9319

Produtos afetados

Trend Micro Enterprise Mobile Security

Referências · 5

• http://securityfocus.com/bid/97272 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9319 · Nota de Segurança
• https://success.trendmicro.com/solution/1116973 · Aviso do Fabricante
• http://info-sec.ca/advisories/Trend-Micro-Enterprise-Mobile-Security.html · Nota
• https://osv.dev/vulnerability/CVE-2016-9319 · Aviso do Fabricante