CVE-2017-14709

HIGH · CVSS 7.4 EPSS 0.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-07-12 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-14709

Severity

HIGH

CVSS

7.4

EPSS

0.49%

Original Filing — NVD Description

The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.