CVE-2017-6466 — F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-m — CVE Database · The Intelligence Room