CVE-2018-15898

MEDIO 5.9CVE-2018-15898 · Published 11/09/2018 · updated 17/06/2026

In breve

CVE-2018-15898 è una vulnerabilità MEDIO (CVSS 5.9) che riguarda music streamer (subsonic).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.91%, superiore al 59.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
music streamer subsonic	`= 4.4`	No fix yet

Description

The Subsonic Music Streamer application 4.4 for Android has Improper Certificate Validation of the Subsonic server certificate, which might allow man-in-the-middle attackers to obtain interaction data.

References

packetstormsecurity.com/files/149267/Subsonic-Music-Streamer-4.4-For-Android-Improper-Certificate-Validation.html · Third Party Advisory
seclists.org/fulldisclosure/2018/Sep/6 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free