Description (CNA)
"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notifications between the affected application and the relevant server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| EPG, Inc. / "Kura Sushi Official App" for Android | affected from 2.0.11 to 3.9.10 |
| EPG, Inc. / "Kura Sushi Official App" for iOS | affected from 2.0.11 to 3.9.10 |
CWE
CWE-295
References
- https://play.google.com/store/apps/details?id=jp.co.kura_corpo&hl=ja
- https://apps.apple.com/jp/app/id942355925
- https://jvn.jp/en/jp/JVN38632731/
ADP enrichment
No English description supplied.
No references supplied.