Authentication flaw

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the Simple Certificate Enrollment Protocol SCEP implementation in the "Profiles" component. It allows remote attackers to bypass cryptographic protection mechanisms by leveraging DES support...

PT-2017-1762

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 Description The issue is related to the Profiles component of the iOS operating system and is caused by insufficient encryption resilience. It involves the Simple Certificate Enrollment Protocol SCEP implementation,...

CVE-2017-2380: Inadequate Encryption Strength

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the Simple Certificate Enrollment Protocol SCEP implementation in the "Profiles" component. It allows remote attackers to bypass cryptographic protection mechanisms by leveraging DES support...