CVE-2019-11554

The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service.

Score

CVSS 3.1 5.9 Medium

Status

Modified - cve@mitre.org

Published

2019-12-06

Last modified

2024-08-04

Weaknesses

CWE-295

Affected products

• Audible (Amazon)

References

• https://pankajupadhyay.in/2019/12/06/audible-and-a-curious-case-of-insecure-by-default-in-adobe-sdks/