CVE-2017-7192

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it…

mitre·CWE-295·Published 2017-04-06

CVSS

—

EPSS

0.02

KEV

Exploits

cve.orgen

185 chars

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false).

NVDen

185 chars

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false).

NVDes

220 chars

WebSocket.swift en Starscream en versiones anteriores a 2.0.4 permite eludir un SSL Pinning debido a una gestión incorrecta de la variable certValidated (se puede establecer en true pero no se puede establecer en false).

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N
3.0	Primary	NVD	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N