CVE-2016-6562

Name of the Vulnerable Software and Affected Versions ShoreTel Mobility Client app version 9.1.3.109

Description The issue is related to the failure of the ShoreTel Mobility Client app to properly validate SSL certificates provided by HTTPS connections. This could allow an attacker, in a position to perform a man-in-the-middle (MITM) attack, to obtain sensitive account information, such as login credentials.

Recommendations For version 9.1.3.109, consider disabling the use of HTTPS connections until a patch is available that properly validates SSL certificates. Restrict access to sensitive account information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.