CVE-2017-3194 Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.
HighCVSS 8.1
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pandora | < 8.3.2 | 8.3.2 |
| Pandora Media, Inc. Pandora iOS App | = Prior to 8.3.2 | No fix listed |
References
- 97158 third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com third-party-advisory vdb-entry
- VU#342303 third-party-advisory us-government-resource
- www.scmagazine.com third-party-advisory