CVE-2023-3615 — Lack of server certificate validation in websockets connection

CVE-2023-3615

Lack of server certificate validation in websockets connection PUBLISHED

Description (CNA)

Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost iOS app	affected 0 through 2.5.0; unaffected 2.5.1

CWE

CWE-295

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.