CVE-2017-3190

CVE-2017-3190

Vendor Flash Seats

Product Flash Seats Mobile App

Weakness CWE-295

Published December 15, 2017

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

Key dates

02Disclosure timeline

December 15, 2017 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-3190 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/295.html

Related vulnerabilities

Identifiers

CVE CVE-2017-3190

CWE CWE-295

Affected versions

Vendor Flash Seats

Product Flash Seats Mobile App

Affected Android version 1.7.9 and earlier

Vendor Flash Seats

Product Flash Seats Mobile App

Affected iOS version 1.9.51 and earlier

01Description

02Disclosure timeline

03References

04Related CVE