CVE-2018-0622 — DHC Corporation / DHC Online Shop App for Android

CVE-2018-0622

DHC Corporation / DHC Online Shop App for Android PUBLISHED

Description (CNA)

The DHC Online Shop App for Android version 3.2.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected (CNA)

Vendor / product	Versions
DHC Corporation / DHC Online Shop App for Android	affected version 3.2.0 and earlier

CWE

No CWE identifiers supplied.

References

http://jvn.jp/en/jp/JVN77409513/index.html

ADP enrichment

CVE

No English description supplied.

http://jvn.jp/en/jp/JVN77409513/index.html