Vulnerability Details CVE-2018-15898
The Subsonic Music Streamer application 4.4 for Android has Improper Certificate Validation of the Subsonic server certificate, which might allow man-in-the-middle attackers to obtain interaction data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.2%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
References
- http://packetstormsecurity.com/files/149267/Subsonic-Music-Streamer-4.4-For-Android-Improper-Certificate-Validation.html
- http://seclists.org/fulldisclosure/2018/Sep/6
- http://packetstormsecurity.com/files/149267/Subsonic-Music-Streamer-4.4-For-Android-Improper-Certificate-Validation.html
- http://seclists.org/fulldisclosure/2018/Sep/6
Products affected by CVE-2018-15898
-
cpe:2.3:a:subsonic:music_streamer:4.4