Apple Music

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-2387 Apr 07, 11:59 MEDIUM This Month

The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 4.8), this vulnerability is no authentication required. No vendor patch available.

Information Disclosure Google Apple Apple Music

NVD

CVSS 3.0

4.8

EPSS

0.2%

CVE-2017-2387

EPSS 0% CVSS 4.8

MEDIUM This Month

The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 4.8), this vulnerability is no authentication required. No vendor patch available.

Information Disclosure Google Apple +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy