CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2017-8941

The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 27.2%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f
https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f

Products affected by CVE-2017-8941

Interval International » Interval International » Version: 3.3

cpe:2.3:a:interval_international:interval_international:3.3
Interval International » Interval International » Version: 3.4

cpe:2.3:a:interval_international:interval_international:3.4
Interval International » Interval International » Version: 3.5

cpe:2.3:a:interval_international:interval_international:3.5
Interval International » Interval International » Version: 3.5.1

cpe:2.3:a:interval_international:interval_international:3.5.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-8941

Products

Pricing

Contact Us