PT-2017-10429 · Microsoft · Lync For Mac 2011

Publicado 2017-03-17 · Atualizado 2017-07-12 · CVE-2017-0129

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Lync for Mac 2011

Description The issue arises from the failure to properly validate certificates, which allows remote attackers to alter server-client communications.

Recommendations For Microsoft Lync for Mac 2011, ensure that certificate validation is properly configured to prevent unauthorized access. As a temporary workaround, consider restricting server-client communications until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2017-0129

Produtos afetados

Lync For Mac 2011

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-0129 · Aviso do Fabricante
• http://securitytracker.com/id/1038020 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0129 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-0129 · Nota de Segurança
• http://securityfocus.com/bid/96752 · Nota