CVE-2017-3194

State: Published
Severity: Not scored
Published: Dec 15, 2017
Updated: Aug 5, 2024
Reserved: Dec 5, 2016

Description

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

Scores

The record has no CVSS score.

Weaknesses

CWE-295 Improper Certificate Validation

Affected Products

Product	Versions
Pandora iOS AppPandora Media, Inc.	Prior to 8.3.2Affected

References

VU#342303third-party-advisory
https://exchange.xforce.ibmcloud.com/collection/XFTAS-Daily-Threat-Assessment-for-March-29-2017-0d704f6eb8163d995bbaf57bbf35a018
97158vdb-entry
https://www.scmagazine.com/pandora-apple-app-vulnerable-to-mitm-attacks/article/647106/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.