PT-2017-10054 · Trend Micro · Trend Micro Enterprise Mobile Security

Published 2017-03-31 · Updated 2017-04-04 · CVE-2016-9319

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Enterprise Mobile Security versions prior to 9.7.1193

Description The issue concerns a missing SSL certificate validation in the Android application.

Recommendations For versions prior to 9.7.1193, update to version 9.7.1193 or later to resolve the issue.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2016-9319

Affected Products

Trend Micro Enterprise Mobile Security

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-9319 · Security Note
• https://success.trendmicro.com/solution/1116973 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-9319 · Vendor Advisory
• http://securityfocus.com/bid/97272 · Note
• http://info-sec.ca/advisories/Trend-Micro-Enterprise-Mobile-Security.html · Note