CVE-2019-11554 describes a missing SSL certificate validation vulnerability in the Audible Android application up to version 2.34.0, specifically within its Adobe SDKs. This flaw allows a Man-in-the-Middle (MITM) attacker to intercept communications and cause a denial of service. While the CVSS score is 5.9 (Medium) with a high impact on availability, the attack complexity is also high, requiring specific conditions for exploitation. There is no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or ExploitDB entries. Community discussion is minimal, with only two mentions, and no media coverage has been observed.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.34.0CPE matchmatch criteria | cpe:2.3:a:amazon:audible:*:*:*:*:*:android:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.