Design/Logic Flaw

2017-09-3001:29:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

JSON

The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate.

CPENameOperatorVersion
site24x7_mobile_network_pollerle1.1.4

CPE	Name	Operator	Version
	site24x7_mobile_network_poller	le	1.1.4

References

www.securityfocus.com/bid/101091

wwws.nightwatchcybersecurity.com/2017/09/27/zoho-site24x7-mobile-network-poller-for-android-didnt-properly-validate-ssl-cve-2017-14582/