CVE-2017-13105

Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication. This opens the application up to a man-in-the-middle attack having all of its encrypted traffic intercepted and read by an attacker.

Score

CVSS 3.0 5.9 Medium

Status

Modified - cret@cert.org

Published

2018-08-15

Last modified

2024-08-05

Weaknesses

CWE-295

Affected products

• Booster (Hi Security Lab)
• Virus Cleaner - Antivirus (Hi Security Lab)
• Virus Cleaner (Hisecuritylab)

References

• https://www.kb.cert.org/vuls/id/787952