CVE-2017-8938

Published: May 15, 2017Modified: May 13, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

The Radio Javan app 9.3.4 through 9.6.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected (11)

Products: Radiojavan: Radio Javan

Radiojavan

1 product

Radio Javan

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Radiojavan Radio Javan	Version 9.3.4
Radiojavan Radio Javan	Version 9.4.1
Radiojavan Radio Javan	Version 9.4.2
Radiojavan Radio Javan	Version 9.4.3
Radiojavan Radio Javan	Version 9.4.4
Radiojavan Radio Javan	Version 9.4.5
Radiojavan Radio Javan	Version 9.4
Radiojavan Radio Javan	Version 9.5.1
Radiojavan Radio Javan	Version 9.5
Radiojavan Radio Javan	Version 9.6.1
Radiojavan Radio Javan	Version 9.6

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f

Source: cve@mitre.org

https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.