PatchTheCVEconcursive vulnerabilities
Recent CVEs affecting concursive products. 3 tracked.
concursive has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-10-20. Highest priority: CVE-2014-7606 (score 24/100).
- CVE-2014-7606 MEDIUM 5.4 DOWNGRADE The Concursive (aka com.concursive.app) application 2.1 for Android does not verify X.509 certificates from SS
- CVE-2014-7358 MEDIUM 5.4 DOWNGRADE The Vermont Powder (aka com.concursive.vermontpowder) application 4.1 for Android does not verify X.509 certif
- CVE-2014-6874 MEDIUM 5.4 DOWNGRADE The ModSim Connected (aka com.concursive.modsim) application 2.0 for Android does not verify X.509 certificate
FAQ
How do I fix concursive vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is concursive being exploited right now?
None of the tracked concursive CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which concursive CVE should I patch first?
CVE-2014-7606 currently ranks highest (24/100): The Concursive (aka com.concursive.app) application 2.1 for Android does not verify X.509 certificates from SS.