CVE-2017-3190

7.5 highEPSS 0.4%

High (7.5) in axs flash seats. EPSS 0.4% chance of exploitation in the next 30 days.

Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2017-12-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

axs:flash_seats

References

http://www.securityfocus.com/bid/96719
https://www.kb.cert.org/vuls/id/247016
https://www.wilderssecurity.com/threads/flash-seats-mobile-app-for-ios-fails-to-validate-ssl-certificates.392553/
http://www.securityfocus.com/bid/96719
https://www.kb.cert.org/vuls/id/247016

Check your stack JSON