CVE-2017-3190

ALTO 7.5CVE-2017-3190 · Published 16/12/2017 · updated 17/06/2026

In breve

CVE-2017-3190 è una vulnerabilità ALTO (CVSS 7.5) che riguarda flash seats (axs).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.42%, superiore al 36.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
flash seats axs	`≤ 1.7.9≤ 1.9.51`	No fix yet

Description

Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

References

securityfocus.com/bid/96719 · Third Party Advisory
kb.cert.org/vuls/id/247016 · Third Party Advisory
wilderssecurity.com/threads/flash-seats-mobile-app-for-ios-fails-to-validate-ssl-certificates.392553 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free