Information disclosure

2018-04-2716:29:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.2%

JSON

WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

CPENameOperatorVersion
paypalle5.3

CPE	Name	Operator	Version
	paypal	le	5.3

References

secunia.com/advisories/57351

exchange.xforce.ibmcloud.com/vulnerabilities/92098

labs.mwrinfosecurity.com/advisories/paypal-remote-code-execution/