VDB
GCVE-110-CERTCC-2017-767208
GCVE-110-CERTCC-2017-767208
Advisory PublishedCVSS 4.8/10
On the iOS platform, the ThreatMetrix SDK versions prior to 3.2 fail to validate SSL certificates provided by HTTPS connections, which may allow an attacker to perform a man-in-the-middle (MITM) attack.
Risk Scores
CVSS 2.0
4.8/10
Medium · AV:A/AC:L/Au:N/C:P/I:P/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact2d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score4remediation_levelOFreport_confidenceCenvironmental_score3.93268236734268target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND
Aliases
References
Browse GCVE Records
73,393 records in the GCVE database · Updated July 17, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.