Skip to content
OpenAdvisories
Unscored CVE-2017-2387 EUVD-2017-11570GHSA-2c64-5hcr-p4hq

The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers, which…

Published Apr 7, 2017 · Updated Aug 5, 2024 · Assigned by apple

Platform: Android

Description

The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

VendorProductAffectedFixed
— Apple Music before 2.0 for Android Apple Music before 2.0 for Android —

References