PT-2017-10429 · Microsoft · Lync For Mac 2011

Published 2017-03-17 · Updated 2017-07-12 · CVE-2017-0129

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Lync for Mac 2011

Description The issue arises from the failure to properly validate certificates, which allows remote attackers to alter server-client communications.

Recommendations For Microsoft Lync for Mac 2011, ensure that certificate validation is properly configured to prevent unauthorized access. As a temporary workaround, consider restricting server-client communications until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2017-0129

Affected Products

Lync For Mac 2011

References · 5

• https://osv.dev/vulnerability/CVE-2017-0129 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0129 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0129 · Security Note
• http://securitytracker.com/id/1038020 · Note
• http://securityfocus.com/bid/96752 · Note