Lucene search
JpcertCVELIST:CVE-2024-27440HistoryMar 13, 2024 - 5:40 a.m.
CVE-2024-27440
2024-03-1305:40:22
jpcert
www.cve.org
toyoko inn
app
ios
android
server certificates
man-in-the-middle
The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don’t properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate.
CNA Affected
[
{
"vendor": "Toyoko Inn IT Solution Co., Ltd.",
"product": "Toyoko Inn official App for iOS",
"versions": [
{
"version": "prior to 1.13.0",
"status": "affected"
}
]
},
{
"vendor": "Toyoko Inn IT Solution Co., Ltd.",
"product": "Toyoko Inn official App for Android",
"versions": [
{
"version": "prior 1.3.14",
"status": "affected"
}
]
}
]Related
prion
prion
Information disclosure
2024-03-13 06:15:00
cve
cve
CVE-2024-27440
2024-03-13 06:15:52
nvd
nvd
CVE-2024-27440
2024-03-13 06:15:52
jvn
jvn