PT-2017-11527 · Malion · Malion For Mac

Muneaki Nishimura · Publicado 2017-08-04 · Atualizado 2021-05-19 · CVE-2017-10819

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MaLion for Mac versions 4.3.0 through 5.2.1

Description The issue is related to improper certificate validation, which may allow an attacker to eavesdrop on encrypted communications.

Recommendations For MaLion for Mac versions 4.3.0 through 5.2.1, update to a version that properly validates certificates to prevent eavesdropping on encrypted communications. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2017-10819

Produtos afetados

Malion For Mac

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-10819 · Aviso do Fabricante
• http://intercom.co.jp/information/2017/0801.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-10819 · Nota de Segurança
• https://t.me/cvenotify/14632 · Publicação no Telegram
• https://jvn.jp/en/vu/JVNVU91587298/index.html · Nota