CoreCVE
Back

MEDIUM

The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitting man-in-the-middle attackers the ability to view an application-only OAuth client token and potentially enable unreleased Twitter iOS app features

Published Sep 18, 2017

Description

The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitting man-in-the-middle attackers the ability to view an application-only OAuth client token and potentially enable unreleased Twitter iOS app features.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-295

Improper Certificate Validation

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner hackerone
Published Sep 18, 2017
Updated Aug 6, 2024
Reserved Sep 18, 2017
Link CVE-2016-10511
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2016-10511
Red Hat
Severity n/a
Public date n/a
Links CVE-2016-10511