CVE-2016-1766

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

CVE-2016-1766

The CVE-2016-1766 entry concerns Apple iOS profiles: a certificate validation flaw in the Profiles component prior to iOS 9.3 allows spoofing of an MDM profile trust relationship. The ZDI advisory (ZDI-16-314) states the flaw is in how signed MDM profiles’ certificates are checked, enabling remot...