EUVD-2017-16230

Malware in sbrugna...

CVE-2017-7192

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable it can be set to true but cannot be set to false...

CVE-2017-7192

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable it can be set to true but cannot be set to false...

PT-2017-17568

Name of the Vulnerable Software and Affected Versions Starscream versions prior to 2.0.4 Description The issue arises from incorrect management of the certValidated variable in WebSocket.swift, allowing an SSL Pinning bypass. This occurs because the variable can be set to true but cannot be reset...

CVE-2017-7192: Improper Certificate Validation

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable it can be set to true but cannot be set to false...