CVE-2021-20833

2021-10-1308:31:11

jpcert

www.cve.org

0.001 Low

EPSS

Percentile

33.4%

JSON

The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate.

CNA Affected

[
  {
    "product": "SNKRDUNK Market Place App for iOS",
    "vendor": "SODA, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 2.2.0"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN10168753/index.html

snkrdunk.com/information/37/

0.001 Low

EPSS

Percentile

33.4%

JSON

Related for CVELIST:CVE-2021-20833