GCVE-110-CERTCC-2017-556600

Advisory PublishedCVSS 4.8/10

Vulnetix · Advisory published May 4, 2017

Space Coast Credit Union SCCU Mobile for Android, version 2.1.0.1104 and earlier, and for iOS, version 2.2 and earlier, fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

Download JSON Open in Console

Risk Scores

CVSS 2.0

4.8/10

Medium · AV:A/AC:L/Au:N/C:P/I:P/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population1d1_direct_report1

certcc-cvss-temporal-env

temporal_score4.6remediation_levelUreport_confidenceCenvironmental_score4.520324560164target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND