Skip to content
OpenAdvisories
Unscored CVE-2017-3194 EUVD-2017-12320GHSA-3j6h-ffr2-hw5m

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attac…

Published Dec 15, 2017 · Updated Aug 5, 2024 · Assigned by certcc

Vendor: Pandora Media Product: Pandora iOS App Platform: iOS

Description

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

Affected products

VendorProductAffectedFixed
Pandora Media Pandora iOS App Prior to 8.3.2 —

References