medium5.9
CVE-2019-16252
Missing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android allows a man-in-the-middle attacker to sniff and manipulate all AP…
Impact
Missing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android allows a man-in-the-middle attacker to sniff and manipulate all API requests, including login credentials and location data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nutfind | Nutfind | through 3.9.12 |