QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2017-3190

Back to search

CVE-2017-3190

Published: Dec 15, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

VendorProductVersions

Flash Seats

Flash Seats Mobile App

affected
Android version 1.7.9 and earlier
affected
iOS version 1.9.51 and earlier

Weaknesses (CWE)

CWE-295

References

VU#247016
third-party-advisory
x_refsource_CERT-VN
96719
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now