JVN#04560253: Yuko Yuko App for Android fails to verify SSL server certificates

Yuko Yuko App for Android provided by Yuko Yuko Corporation fails to verify SSL server certificates.

Impact

A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. As a result, an attacker may obtain information entered into web forms.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Yuko Yuko App for Android versions 1.0.5 and earlier