CVE-2017-3194 | BDVDB-2026-94148 Detail

Pandora MediaPandora iOS App

Description#

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-295 Improper Certificate Validation

References#

https://www.kb.cert.org/vuls/id/342303
https://exchange.xforce.ibmcloud.com/collection/XFTAS-Daily-Threat-Assessment-for-March-29-2017-0d704f6eb8163d995bbaf57bbf35a018
http://www.securityfocus.com/bid/97158
https://www.scmagazine.com/pandora-apple-app-vulnerable-to-mitm-attacks/article/647106/

Exploit#

No public exploit known

History#

Version 12017-12-15Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.