PT-2017-11527 · Malion · Malion For Mac

Muneaki Nishimura · Published 2017-08-04 · Updated 2021-05-19 · CVE-2017-10819

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MaLion for Mac versions 4.3.0 through 5.2.1

Description The issue is related to improper certificate validation, which may allow an attacker to eavesdrop on encrypted communications.

Recommendations For MaLion for Mac versions 4.3.0 through 5.2.1, update to a version that properly validates certificates to prevent eavesdropping on encrypted communications. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2017-10819

Affected Products

Malion For Mac

References · 5

• https://osv.dev/vulnerability/CVE-2017-10819 · Vendor Advisory
• http://intercom.co.jp/information/2017/0801.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-10819 · Security Note
• https://t.me/cvenotify/14632 · Telegram Post
• https://jvn.jp/en/vu/JVNVU91587298/index.html · Note