Improper input validation in Activision Call Of Duty Elite
CVE-2012-4918
Call of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which allows remote attackers to obtain sensitive information via a Man-in-the-Middle (MITM) attack.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.011 (61.5th percentile) — read the EPSS interpretation.
Affected products
- Activision Call_of_duty_elite — versions 2.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
- PSIRT-CNA@flexerasoftware.com (x_refsource_OSVDB, vdb-entry)
- PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)