CVE-2017-11130 - An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop

Back Back to CVE browser

HIGH

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop

Published Aug 1, 2017

8.1

HIGH

CVSS 3.0

EPSS 0.40%

Description

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The product's protocol only tries to ensure confidentiality. In the whole protocol, no integrity or authenticity checks are done. Therefore man-in-the-middle attackers can conduct replay attacks.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-345

References (2)

http://seclists.org/fulldisclosure/2017/Jul/90
x_refsource_MISCMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-2765
Advisory

Link	Providers	Tags
http://seclists.org/fulldisclosure/2017/Jul/90		x_refsource_MISCMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-2765		Advisory