| Package | Affected versions | Patched versions |
|---|---|---|
| hipchat | ≤ 3.16.1 |
Acceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free