CVE-2017-2105

The TVer App for Android 3.2.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

• CWE-200

• http://jvn.jp/en/jp/JVN53880182/index.htmlPatch, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/96232Third Party Advisory, VDB Entry
• http://jvn.jp/en/jp/JVN53880182/index.htmlPatch, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/96232Third Party Advisory, VDB Entry

Published

Apr 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2099Hands-on Vulnerability Learning Tool "AppGoat" for Web Appli…
• CVE-2017-2100Hands-on Vulnerability Learning Tool "AppGoat" for Web Appli…
• CVE-2017-2101Hands-on Vulnerability Learning Tool "AppGoat" for Web Appli…
• CVE-2017-2102Cross-site request forgery (CSRF) vulnerability in Hands-on …
• CVE-2017-2103The LaLa Call App for Android 2.4.7 and earlier does not ver…
• CVE-2017-2104The Business LaLa Call App for Android 1.4.7 and earlier doe…
• CVE-2017-2106Multiple cross-site scripting vulnerabilities in Webmin vers…
• CVE-2017-2107Untrusted search path vulnerability in Self-extracting archi…
• CVE-2017-2108Untrusted search path vulnerability in PrimeDrive Desktop Ap…
• CVE-2017-2109Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attac…
• CVE-2017-2110The Access CX App for Android prior to 2.0.0.1 and for iOS p…
• CVE-2017-2111HTTP header injection vulnerability in TS-WPTCAM firmware ve…