Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2wc2-w32v-v8wr

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The iTriage Health (aka com.healthagen.iTriage) application 5.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

The iTriage Health (aka com.healthagen.iTriage) application 5.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

EPSS

Процентиль: 18%
0.00266
Низкий

Связанные уязвимости

nvd
почти 12 лет назад

The iTriage Health (aka com.healthagen.iTriage) application 5.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

EPSS

Процентиль: 18%
0.00266
Низкий