PT-2017-6464 · Shidax · Restaurant Karaoke Shidax

Yasuyuki Kobayashi · Published 2017-07-25 · Updated 2017-07-31 · CVE-2015-0904

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions The Restaurant Karaoke SHIDAX app versions 1.3.3 and earlier

Description The issue allows remote attackers to obtain sensitive information via a man-in-the-middle attack because the app does not verify SSL certificates.

Recommendations For versions 1.3.3 and earlier, consider disabling the app's network functionality until a patch is available that properly verifies SSL certificates. Restrict access to sensitive information to minimize the risk of exploitation.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2015-0904

Affected Products

Restaurant Karaoke Shidax

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0904 · Security Note
• http://jvn.jp/en/jp/JVN68819526/index.html · Note
• http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000049.html · Note