CVE-2017-3190 Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attac...
HighCVSS 7.5
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| axs flash seats | <= 1.9.51 | No fix listed |
| axs flash seats | <= 1.7.9 | No fix listed |
| Flash Seats Mobile App | = Android version 1.7.9 and earlier | No fix listed |
| Flash Seats Mobile App | = iOS version 1.9.51 and earlier | No fix listed |
References
- 96719 third-party-advisory vdb-entry
- VU#247016 third-party-advisory us-government-resource
- www.wilderssecurity.com third-party-advisory