CoreCVE
Back

MEDIUM

Missing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android allows a man-in-the-middle attacker to sniff and manipulate all API requests, including login credentials and location data

Published Jun 12, 2020

Description

Missing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android allows a man-in-the-middle attacker to sniff and manipulate all API requests, including login credentials and location data.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-295

Improper Certificate Validation

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jun 12, 2020
Updated Aug 5, 2024
Reserved Sep 11, 2019
Link CVE-2019-16252
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-16252
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-16252