What is CVE-2017-14486?

CVE-2017-14486 is a high-severity vulnerability in Vibease Chat, classified under Cleartext Transmission of Sensitive Information. CVSS score: 7.5/10. Published 2017-12-01.

How severe is CVE-2017-14486?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Vibease Chat

CVE-2017-14486

The Vibease Wireless Remote Vibrator app for Android and the Vibease Chat app for iOS use cleartext to exchange messages with other apps and the PLAIN SASL mechanism to send auth tokens to Vibease servers, which allows remote attackers to obtain user credentials, messages, and other sensitive information by sniffing the network for XMPP traffic.

EPSS: 0.008 (54.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-14486?: CVE-2017-14486 is a high-severity vulnerability in Vibease Chat, classified under Cleartext Transmission of Sensitive Information. CVSS score: 7.5/10. Published 2017-12-01.
How severe is CVE-2017-14486?: High severity. CVSS v3 base score is 7.5 out of 10.