CVE-2017-13105CWE-295

Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.7%

probabilidade de exploração

0.7%top 48% das CVEs

exploração observada

nãonenhuma fonte reporta

Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication. This opens the application up to a man-in-the-middle attack having all of its encrypted traffic intercepted and read by an attacker.

Produtos afetados

Hi Security Lab · Virus Cleaner - Antivirus, Booster

Referências

https://www.kb.cert.org/vuls/id/787952