CVE-2015-2981

Опубликовано: 12 янв. 2018

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Ссылки

http://jvn.jp/en/jp/JVN29053368/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000111.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/76266
Third Party Advisory
VDB Entry
http://jvn.jp/en/jp/JVN29053368/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000111.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/76266
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:yodobashi:yodobashi:*:*:*:*:*:android:*:*

Версия до 1.2.1.0 (включая)

EPSS

Процентиль: 65%

0.00497

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-295

Связанные уязвимости

GHSA-v7j9-w82c-6xcj