CVE-2017-3194CWE-295

CVE-2017-3194: vulnerability in Pandora iOS App

Published · Updated

Follow this CVE+ Monitor Pandora iOS App

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.
Affected products
Pandora Media, Inc. · Pandora iOS App