Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/96719 | Third Party Advisory VDB Entry |
https://www.kb.cert.org/vuls/id/247016 | Third Party Advisory US Government Resource |
https://www.wilderssecurity.com/threads/flash-seats-mobile-app-for-ios-fails-to-validate-ssl-certificates.392553/ | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: certcc
Published: 2017-12-15T14:00:00
Updated: 2017-12-15T13:57:01
Reserved: 2016-12-05T00:00:00
Link: CVE-2017-3190
JSON object: View
NVD Information
Status : Modified
Published: 2017-12-16T02:29:10.230
Modified: 2019-10-09T23:27:20.930
Link: CVE-2017-3190
JSON object: View
Redhat Information
No data.
CWE