← Zuruck zu CVEs
CVE-2016-4840
MEDIUM5.9
Beschreibung
Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates.
CVE Details
CVSS v3.1 Bewertung5.9
SchweregradMEDIUM
CVSS VektorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AngriffsvektorNETWORK
KomplexitatHIGH
Erforderliche PrivilegienNONE
BenutzerinteraktionNONE
Veroffentlicht4/21/2017
Zuletzt geandert4/20/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
toshiba:coordinate_plus
Schwachen (CWE)
CWE-295
Referenzen
http://jvn.jp/en/jp/JVN06920277/index.html(vultures@jpcert.or.jp)
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000133.html(vultures@jpcert.or.jp)
http://www.securityfocus.com/bid/92314(vultures@jpcert.or.jp)
http://jvn.jp/en/jp/JVN06920277/index.html(af854a3a-2127-422b-91ae-364da2661108)
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000133.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/92314(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.