PT-2023-22284
CVE-2023-29501
·
Publicado
2023-06-13
·
Atualizado
2023-06-23
Descrição por
CVSS 3.1
4.8
MédiaMétricasAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier
Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier
Description
The issue is related to improper server certificate verification. If exploited, it may allow a man-in-the-middle attack, enabling an attacker to eavesdrop on encrypted communication.
Recommendations
For Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, update to a version later than 3.5.0 to resolve the issue.
For Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier, update to a version later than 3.5.0 to resolve the issue.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾