CVE-2017-8941

Published: May 15, 2017Modified: May 13, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected (4)

Products: Interval International: Interval International

Interval International

1 product

Interval International

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Interval International Interval International	Version 3.3
Interval International Interval International	Version 3.4
Interval International Interval International	Version 3.5.1
Interval International Interval International	Version 3.5

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f

Source: cve@mitre.org

https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.