CVE-2016-4840 in Plus App

Summary

Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 05/17/2016
• Disclosure: 04/21/2017
• Moderation: VulDB entry created
• Entries: VDB-100434 (1)
• CPE: ready
• CWE: CWE-295 (Confirmed)
• CVSS: 5.7
• EPSS: 0.00584
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-4840
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-4840
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-4840/