Code injection

2023-07-1716:15:00

PRIOn knowledge base

www.prio-n.com

mattermost ios

certificate validation

tls connection

network attacker

websockets

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.0%

JSON

Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection.

CPENameOperatorVersion
mattermostlt2.5.1

CPE	Name	Operator	Version
	mattermost	lt	2.5.1

References

mattermost.com/security-updates