← Back

CVE-2016-10673

nvd nist
Published: Jun 4, 2018Modified: Nov 21, 2024

JSON object

Loading...
8.1
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: NVD

Description

ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application.

Affected (1)

Products: Ipip: Ipip Coffee
Ipip
1 product
Ipip Coffee
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ipip Coffee
Up to 1.0.9

Related CWEs

CWE-310
CWE-310
CWE-311
Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.

References (2)

Source: support@hackerone.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.