First published: Fri Mar 31 2017(Updated: )
There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Trend Micro Mobile Security | <=9.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-9319 is classified as a medium-severity vulnerability due to the potential for man-in-the-middle attacks.
To fix CVE-2016-9319, update the Trend Micro Enterprise Mobile Security application to version 9.7.1194 or higher.
CVE-2016-9319 allows attackers to intercept and manipulate sensitive data transmitted over SSL, compromising user security.
CVE-2016-9319 affects all versions of Trend Micro Enterprise Mobile Security for Android prior to 9.7.1194.
Yes, CVE-2016-9319 is a client-side vulnerability affecting the Trend Micro Enterprise Mobile Security application.