shinyColumn/CVE-2025-46408

shinyColumn/CVE-2025-46408

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
Improper Hostname Verification in EagleEyes Lite Android Application
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-46408↗
9.8 CRITICAL—

An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOW_ALL_HOSTNAME_VERIFIER, bypassing domain validation.