Skip to content

CVE-2017-8939 The Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informati...

MediumCVSS 5.9 EPSS 0.60%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

ProductAffected versionsFixed in
warnerbros ellentube = 3.1.1 No fix listed
warnerbros ellentube = 3.1.2 No fix listed
warnerbros ellentube = 3.1.3 No fix listed

References