Описание
An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOW_ALL_HOSTNAME_VERIFIER, bypassing domain validation.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:avtech:eagleeyes\(lite\):2.0.0:*:*:*:*:android:*:*
EPSS
Процентиль: 9%
0.00033
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-297
Связанные уязвимости
CVSS3: 9.8
github
5 месяцев назад
An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOW_ALL_HOSTNAME_VERIFIER, bypassing domain validation.
EPSS
Процентиль: 9%
0.00033
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-297