CVE-2017-3194

Published: Dec 15, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

Vendor	Product	Versions
Pandora Media, Inc.	Pandora iOS App	affected `Prior to 8.3.2`

Weaknesses (CWE)

CWE-295

References

VU#342303

third-party-advisory

x_refsource_CERT-VN

https://exchange.xforce.ibmcloud.com/collection/XFTAS-Daily-Threat-Assessment-for-March-29-2017-0d704f6eb8163d995bbaf57bbf35a018

x_refsource_MISC

97158

vdb-entry

x_refsource_BID

https://www.scmagazine.com/pandora-apple-app-vulnerable-to-mitm-attacks/article/647106/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-3194

Description

Affected Products

Weaknesses (CWE)

References