PT-2017-8536
CVE-2016-4829
·
Published
2017-04-21
·
Updated
2017-04-26
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
DMM Movie Player App for Android versions prior to 1.2.1
DMM Movie Player App for iPhone/iPad versions prior to 2.1.3
Description
The issue is related to the failure of the app to verify SSL certificates. This could potentially allow for man-in-the-middle attacks.
Recommendations
For DMM Movie Player App for Android versions prior to 1.2.1, update to version 1.2.1 or later.
For DMM Movie Player App for iPhone/iPad versions prior to 2.1.3, update to version 2.1.3 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾