CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2017-8939

The Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 32.1%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f
https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f

Products affected by CVE-2017-8939

Warnerbros » Ellentube » Version: 3.1.1

cpe:2.3:a:warnerbros:ellentube:3.1.1
Warnerbros » Ellentube » Version: 3.1.2

cpe:2.3:a:warnerbros:ellentube:3.1.2
Warnerbros » Ellentube » Version: 3.1.3

cpe:2.3:a:warnerbros:ellentube:3.1.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-8939

Products

Pricing

Contact Us