All the vulnerabilites related to RUNSYSTEM CO.,LTD. - Jiyu Kukan Toku-Toku coupon App for iOS, and Jiyu Kukan Toku-Toku coupon App for Android
cve-2023-29501
Vulnerability from cvelistv5
Published
2023-06-13 00:00
Modified
2024-08-02 14:07
Severity ?
EPSS score ?
Summary
Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier are vulnerable to improper server certificate verification. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.
References
Impacted products
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T14:07:46.309Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://www.runsystem.co.jp/g1-pr/17570" }, { "tags": [ "x_transferred" ], "url": "https://apps.apple.com/jp/app/%E8%87%AA%E9%81%8A%E7%A9%BA%E9%96%93%E3%81%A8%E3%81%8F%E3%81%A8%E3%81%8F%E3%82%AF%E3%83%BC%E3%83%9D%E3%83%B3/id608149604" }, { "tags": [ "x_transferred" ], "url": "https://play.google.com/store/apps/details?id=jp.runsystem" }, { "tags": [ "x_transferred" ], "url": "https://jvn.jp/en/jp/JVN33836375/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Jiyu Kukan Toku-Toku coupon App for iOS, and Jiyu Kukan Toku-Toku coupon App for Android", "vendor": "RUNSYSTEM CO.,LTD.", "versions": [ { "status": "affected", "version": "Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier" } ] } ], "descriptions": [ { "lang": "en", "value": "Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier are vulnerable to improper server certificate verification. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication." } ], "problemTypes": [ { "descriptions": [ { "description": "Improper Certificate Validation", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2023-06-13T00:00:00", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert" }, "references": [ { "url": "https://www.runsystem.co.jp/g1-pr/17570" }, { "url": "https://apps.apple.com/jp/app/%E8%87%AA%E9%81%8A%E7%A9%BA%E9%96%93%E3%81%A8%E3%81%8F%E3%81%A8%E3%81%8F%E3%82%AF%E3%83%BC%E3%83%9D%E3%83%B3/id608149604" }, { "url": "https://play.google.com/store/apps/details?id=jp.runsystem" }, { "url": "https://jvn.jp/en/jp/JVN33836375/" } ] } }, "cveMetadata": { "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2023-29501", "datePublished": "2023-06-13T00:00:00", "dateReserved": "2023-05-11T00:00:00", "dateUpdated": "2024-08-02T14:07:46.309Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }