CVE-2016-7805

Severity: medium (CVSS 5.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-09 · updated 2026-06-17
Weakness: CWE-295

Description

The mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

Unisys Mobigate: through 2.2.1.2; through 2.2.4.1

References

http://www.securityfocus.com/bid/94085
https://jvn.jp/en/jp/JVN27260483/index.html
http://www.securityfocus.com/bid/94085
https://jvn.jp/en/jp/JVN27260483/index.html

Get alerted when CVE-2016-7805 or the next vulnerability affects your stack