What’s Vulnerable › Vulnerabilities

CVE-2017-3190

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-12-16 · updated 2026-06-17
• Weakness: CWE-295

Description

Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

Affected products

• Flash Seats Mobile App: through 1.9.51; through 1.7.9

References

• http://www.securityfocus.com/bid/96719
• https://www.kb.cert.org/vuls/id/247016
• https://www.wilderssecurity.com/threads/flash-seats-mobile-app-for-ios-fails-to-validate-ssl-certificates.392553/
• http://www.securityfocus.com/bid/96719
• https://www.kb.cert.org/vuls/id/247016
• https://www.wilderssecurity.com/threads/flash-seats-mobile-app-for-ios-fails-to-validate-ssl-certificates.392553/

Get alerted when CVE-2017-3190 or the next vulnerability affects your stack