CVE-2015-5655 in Adways Party Track SDKinfo

Summary

The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Reservation

07/24/2015

Disclosure

11/09/2015

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
79098Adways Party Track SDK X.509 Certificate Chain Validation cryptographic issue310Not definedOfficial fixCVE-2015-5655

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!