CVE-2017-3194CWE-295

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct…

published December 15, 2017

CVSS
—
EPSS
1%
Percentile
69.7
In the wild
Unconfirmed
What it is

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01282 · 69.7th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2017-12-15T14:00Z
EPSS history
Timeline
  • 15 DEC 14:00Z
    Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct…
    cvelistv5