Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority LOW 24

The Coca-Cola FM Brasil (aka com.enyetech.radio.coca_cola.fm_br) application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00292 Published 2014-10-21 No fix listed CWE-310
Priority LOW 24

The Coca-Cola FM Honduras (aka com.enyetech.radio.coca_cola.fm_hn) application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obta…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00292 Published 2014-10-21 No fix listed CWE-310
Priority LOW 24

The Coca-Cola FM Guatemala (aka com.enyetech.radio.coca_cola.fm_gu) application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obt…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00292 Published 2014-10-20 No fix listed CWE-310
Priority LOW 24

The Coca-Cola FM Peru (aka com.enyetech.radio.coca_cola.fm_pe) application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain s…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00292 Published 2014-10-04 No fix listed CWE-310