CVE-2017-11132

An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; therefore the attacker could issue a certificate for the backend and the application would not notice it.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2017-08-01

Last modified

2024-08-05

Weaknesses

CWE-295

Affected products

• Stashcat (Heinekingmedia)

References

• http://seclists.org/fulldisclosure/2017/Jul/90