Back to Database
Status published
Medium
CVE-2016-10511
The Twitter iOS client versions 6.62 and 6.62.1 fail to...
Vulnerability Description
The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitting man-in-the-middle attackers the ability to view an application-only OAuth client token and potentially enable unreleased Twitter iOS app features.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-10511
Credits & Attribution
No credits recorded in the NVD database.
More from twitter
View All →CVE-2020-35774
server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some...
Medium
5.4
CVE-2019-16263
The Twitter Kit framework through 3.4.2 for iOS does not...
High
7.4
CVE-2014-6838
The Groupama toujours la (aka com.groupama.toujoursla) application 1.3.0 for Android...
Medium
5.4
Affected Vendor
Affected Software
twitter
Vulnerable Versions:
6.62, 6.62.1
Timeline
Official Publish:
September 18th, 2017
Last Modified:
August 6th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.