CVE-2023-29501

Katalog CVE

CVSS 4.8 · Medium EPSS 0,28%

Kerentanan Improper Certificate Validation pada runsystem jiyu kukan toku-toku coupon. Skor CVSS 3.1 4.8 (Medium) menurut NVD.

Deskripsi (NVD)

Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier are vulnerable to improper server certificate verification. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.

Rincian

Terbit di NVD

13 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-295: Improper Certificate Validation

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 19,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.runsystem.co.jp/g1-pr/17570 advisory vendor
• https://jvn.jp/en/jp/JVN33836375/ advisory pihak ketiga
• https://apps.apple.com/jp/app/%E8%87%AA%E9%81%8A%E7%A9%BA%E9%96%93%E3%81%A8%E3%81%8F%E3%81%A8%E3%81%8F%E3%82%A... product
• https://play.google.com/store/apps/details?id=jp.runsystem product