Unrated severityNVD Advisory· Published Oct 23, 2015· Updated May 6, 2026
CVE-2015-6997
CVE-2015-6997
Description
The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: < 9.1
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- lists.apple.com/archives/security-announce/2015/Dec/msg00002.htmlnvdVendor Advisory
- lists.apple.com/archives/security-announce/2015/Oct/msg00002.htmlnvdVendor Advisory
- support.apple.com/HT205370nvdVendor Advisory
- support.apple.com/HT205641nvdVendor Advisory
- www.securityfocus.com/bid/77268nvd
- www.securitytracker.com/id/1033929nvd
News mentions
0No linked articles in our index yet.