cve/2017/CVE-2017-3194.md

### [CVE-2017-3194](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3194)
![](https://img.shields.io/static/v1?label=Product&message=Pandora%20iOS%20App&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-295%3A%20Improper%20Certificate%20Validation&color=brighgreen)

### Description

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

### POC

#### Reference
- https://www.scmagazine.com/pandora-apple-app-vulnerable-to-mitm-attacks/article/647106/

#### Github
No PoCs found on GitHub currently.