PT-2017-7274 · Ios · Ganma! App

Yuji Tounai · Publicado 2017-09-25 · Atualizado 2017-10-06 · CVE-2015-7785

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GANMA! App for iOS (affected versions not specified)

Description The issue is related to the GANMA! App for iOS not verifying SSL certificates. This could potentially allow for man-in-the-middle attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2015-7785

Produtos afetados

Ganma! App

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-7785 · Nota de Segurança
• http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000191.html · Nota
• http://jvn.jp/en/jp/JVN44541100/index.html · Nota