PT-2017-6464 · Shidax · Restaurant Karaoke Shidax

Yasuyuki Kobayashi · Publicado 2017-07-25 · Atualizado 2017-07-31 · CVE-2015-0904

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions The Restaurant Karaoke SHIDAX app versions 1.3.3 and earlier

Description The issue allows remote attackers to obtain sensitive information via a man-in-the-middle attack because the app does not verify SSL certificates.

Recommendations For versions 1.3.3 and earlier, consider disabling the app's network functionality until a patch is available that properly verifies SSL certificates. Restrict access to sensitive information to minimize the risk of exploitation.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2015-0904

Produtos afetados

Restaurant Karaoke Shidax

Referências · 3

• http://jvn.jp/en/jp/JVN68819526/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0904 · Nota de Segurança
• http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000049.html · Nota