CVE-2017-7192

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true…

published April 6, 2017

CVSS
—
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01905 · 79.4th percentile
Published
2017-04-06T14:00Z
EPSS history
Timeline
  • 06 APR 14:00Z
    WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true…
    cvelistv5