PT-2017-15318
CVE-2017-2278
·
تاريخ النشر
2017-08-02
·
تاريخ التحديث
2017-08-04
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
RBB SPEED TEST App for Android versions 2.0.3 and earlier
RBB SPEED TEST App for iOS versions 2.1.0 and earlier
Description
The issue concerns the failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Recommendations
For RBB SPEED TEST App for Android versions 2.0.3 and earlier, update to a version that properly verifies X.509 certificates.
For RBB SPEED TEST App for iOS versions 2.1.0 and earlier, update to a version that properly verifies X.509 certificates.
As a temporary workaround, consider disabling the use of SSL connections in the app until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾