CVE-2015-5655 in Adways Party Track SDK
Resumen (Inglés)
The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Reservar
2015-07-24
Divulgación
2015-11-09
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 79098 | Adways Party Track SDK X.509 Certificate Chain Validation cifrado débil | 310 | No está definido | Arreglo oficial | CVE-2015-5655 |