Skip to content
OpenAdvisories
Unscored CVE-2019-16252 EUVD-2019-7058GHSA-jwm8-xr75-vc54

Missing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android allows a man-in-the-middle attacker to sniff a…

Published Jun 12, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Description

Missing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android allows a man-in-the-middle attacker to sniff and manipulate all API requests, including login credentials and location data.

References