Lucene search
Veracode Vulnerability DatabaseVERACODE:3227HistoryJan 04, 2017 - 6:26 a.m.
Man In The Middle (MitM)
2017-01-0406:26:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
44.6%
ipip-coffee is vulnerable to man-in-the-middle (MitM) attacks. It downloads geolocation resources over HTTP, which leaves it vulnerable to MitM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ipip-coffee | le | 1.0.9 |
References
Related
github
github
ipip-coffee downloads Resources over HTTP
2019-02-18 23:44:24
cve
cve
CVE-2016-10673
2018-06-04 16:29:01
prion
prion
Code injection
2018-06-04 16:29:00
nodejs
nodejs
Downloads Resources over HTTP
2016-12-02 04:28:01
nvd
nvd
CVE-2016-10673
2018-06-04 16:29:01
osv
osv
ipip-coffee downloads Resources over HTTP
2019-02-18 23:44:24
cvelist
cvelist
CVE-2016-10673
2018-04-26 00:00:00