CVE-2016-10568CWE-311

geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup

published May 29, 2018

CVSS
—
EPSS
1%
Percentile
46.1
In the wild
Unconfirmed
What it is

geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00569 · 46.1th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2018-05-29T20:00Z
EPSS history
Timeline
  • 29 MAY 20:00Z
    geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup
    cvelistv5