First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2017-8943

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: May 15, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-89447.5A Remote Disclosure of Information vulnerability in HPE Cloud Optimizer version v3.0x was found.CVE-2017-89456.1A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Federation Agent version 3.0 was found.CVE-2017-89468.3A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0 and 1.0.1 was found.CVE-2017-89479.8A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found.CVE-2017-89489.8A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software versions v10.0x, v10.1x, v10.2x was found.CVE-2017-89495.5A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.CVE-2017-89505.5A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.CVE-2017-89517.8A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.CVE-2017-89527.5A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.CVE-2017-89535.4A Remote Cross-Site Scripting (XSS) vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier CVE-2017-89549.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.CVE-2017-89557.5A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.