PT-2023-22284
CVE-2023-29501
·
Published
2023-06-13
·
Updated
2023-06-23
Description by
CVSS 3.1
4.8
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier
Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier
Description
The issue is related to improper server certificate verification. If exploited, it may allow a man-in-the-middle attack, enabling an attacker to eavesdrop on encrypted communication.
Recommendations
For Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, update to a version later than 3.5.0 to resolve the issue.
For Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier, update to a version later than 3.5.0 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾