Design/Logic Flaw

2017-08-0114:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.6%

JSON

An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; therefore the attacker could issue a certificate for the backend and the application would not notice it.

CPENameOperatorVersion
stashcatle1.5.17

CPE	Name	Operator	Version
	stashcat	le	1.5.17

References

seclists.org/fulldisclosure/2017/Jul/90