PT-2017-7274 · Ios · Ganma! App

Yuji Tounai · Published 2017-09-25 · Updated 2017-10-06 · CVE-2015-7785

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GANMA! App for iOS (affected versions not specified)

Description The issue is related to the GANMA! App for iOS not verifying SSL certificates. This could potentially allow for man-in-the-middle attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2015-7785

Affected Products

Ganma! App

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-7785 · Security Note
• http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000191.html · Note
• http://jvn.jp/en/jp/JVN44541100/index.html · Note