Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.9
CVE-2017-8939: Warner Bros. eLLENtube iOS app lets attackers intercept data
CVE-2017-8939 · published 9 years ago
Summary
Versions 3.1.1 to 3.1.3 of the Warner Bros. eLLENtube app for iPhone do not properly verify the security certificates of the servers they connect to. This lets a malicious party pretend to be a legitimate server and capture information the app sends or receives. Update the app to a newer version or stop using it on untrusted networks until a fix is applied.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| warnerbros | ellentube |
3.1.1 3.1.2 3.1.3 cpe:2.3:a:warnerbros:ellentube:3.1.1:*:*:*:*:iphone_os:*:* |
Original advisory text
The Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive inform...
The Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-295Improper Certificate Validation
Timeline
Published15 May 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-8939 · NVD
Track software like this
Free during beta