VULNERABILITY INTELLIGENCE

CVE-2017-6988

CVSS score5.9 MEDIUM
EPSS probability0.85%
CISA KEVNot currently listed
Published2017-05-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "802.1X" component. It allows remote attackers to discover the network credentials of arbitrary users by operating a crafted network that requires 802.1X authentication, because EAP-TLS certificate validation mishandles certificate changes.

Weakness classification

  • CWE-295: Improper Certificate Validation

Primary references