Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4pr8-9cmx-vj4x

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Yahoo! Japan Shopping application 1.4 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

The Yahoo! Japan Shopping application 1.4 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

EPSS

Процентиль: 34%
0.00134
Низкий

Связанные уязвимости

nvd
больше 12 лет назад

The Yahoo! Japan Shopping application 1.4 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

EPSS

Процентиль: 34%
0.00134
Низкий