What is CVE-2017-3190?

CVE-2017-3190 is a high-severity vulnerability in Axs Flash Seats, classified under Improper Certificate Validation. CVSS score: 7.5/10. Published 2017-12-16.

How severe is CVE-2017-3190?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Axs Flash Seats

CVE-2017-3190

Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

Vulnerability class: Improper Certificate Validation

EPSS: 0.004 (34.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Axs Flash_seats
Flash Seats Mobile App — versions Android version 1.7.9 and earlier, iOS version 1.9.51 and earlier

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

cret@cert.org (Third Party Advisory, x_refsource_MISC)
cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
cret@cert.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2017-3190?: CVE-2017-3190 is a high-severity vulnerability in Axs Flash Seats, classified under Improper Certificate Validation. CVSS score: 7.5/10. Published 2017-12-16.
How severe is CVE-2017-3190?: High severity. CVSS v3 base score is 7.5 out of 10.