CVE-2017-7192 | BDVDB-2026-83749 Detail

Description#

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/daltoniam/Starscream/releases/tag/2.0.4
https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6
http://seclists.org/bugtraq/2017/Apr/66

Exploit#

No public exploit known

History#

Version 12017-04-06Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.