CVE-2017-5887

2017-04-0614:59:00

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.9%

JSON

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function (this is too late; pinning should occur in the initStreamsWithData function).

CPENameOperatorVersion
starscreameq1.0.1
starscreameq1.0.0
starscreameq1.1.3
starscreameq2.0.0
starscreameq0.9.5
starscreameq0.9.4
starscreameq0.9.2
starscreameq1.1.0
starscreameq1.0.2
starscreameq1.1.1

Name	Operator	Version
starscream	eq	1.0.1
starscream	eq	1.0.0
starscream	eq	1.1.3
starscream	eq	2.0.0
starscream	eq	0.9.5
starscream	eq	0.9.4
starscream	eq	0.9.2
starscream	eq	1.1.0
starscream	eq	1.0.2
starscream	eq	1.1.1