Detections
Analytics
CVE-2016-1766
high
Description
The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors.
References
https://support.apple.com/HT206166
http://www.zerodayinitiative.com/advisories/ZDI-16-314
http://www.securitytracker.com/id/1035353
http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html