PT-2019-12377 · Adobe+1 · Sdks+1

Pankaj Upadhyay · Publicado 2019-12-06 · Atualizado 2019-12-11 · CVE-2019-11554

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Audible application versions through 2.34.0 for Android

Description The issue concerns missing SSL certificate validation for Adobe SDKs in the Audible application, allowing man-in-the-middle (MITM) attackers to cause a denial of service.

Recommendations For versions through 2.34.0, update to a version that includes the fix for the missing SSL certificate validation issue.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2019-11554

Produtos afetados

Sdks

Audible

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-11554 · Nota de Segurança
• https://pankajupadhyay.in/2019/12/06/audible-and-a-curious-case-of-insecure-by-default-in-adobe-sdks · Nota
• https://osv.dev/vulnerability/CVE-2019-11554 · Aviso do Fabricante