VULNERABILITY INTELLIGENCE

CVE-2017-3190

CVSS score7.5 HIGH

EPSS probability0.42%

CISA KEVNot currently listed

Published2017-12-16

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

Weakness classification

CWE-295: Improper Certificate Validation

Primary references

cret@cert.org — Third Party Advisory, VDB Entry
cret@cert.org — Third Party Advisory, US Government Resource
cret@cert.org — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory