CVE-2016-10673

CVE-2016-10673

Vendor Hackerone

Product ipip-coffee node module

Weakness CWE-311 · Missing encryption

Published June 4, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application.

Key dates

02Disclosure timeline

June 4, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2016-10673 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/311.html

Related vulnerabilities

01Description

02Disclosure timeline

03References

04Related CVE