PT-2019-17949 · Rakuma · Rakuma App For Ios+1

Gaku Mochizuki · Published 2019-12-26 · Updated 2020-01-02 · CVE-2019-6024

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Rakuma App for Android versions 7.15.0 and earlier Rakuma App for iOS versions 7.16.4 and earlier

Description The issue allows an attacker to bypass authentication and obtain a user's authentication information through a malicious application created by a third party.

Recommendations For Rakuma App for Android versions 7.15.0 and earlier, update to a version later than 7.15.0 to resolve the issue. For Rakuma App for iOS versions 7.16.4 and earlier, update to a version later than 7.16.4 to resolve the issue.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2019-6024

Affected Products

Rakuma App For Android

Rakuma App For Ios

References · 5

• https://osv.dev/vulnerability/CVE-2019-6024 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6024 · Security Note
• http://jvn.jp/en/jp/JVN41566067/index.html · Note
• https://apps.apple.com/jp/app/furimaapuri-furiru-fril-fasshon/id523497998 · Note
• https://play.google.com/store/apps/details?id=jp.co.fablic.fril&hl=en · Note