Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f7jh-gwcq-g9w3

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

EPSS

Процентиль: 36%
0.00152
Низкий

Связанные уязвимости

nvd
больше 11 лет назад

The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

EPSS

Процентиль: 36%
0.00152
Низкий