JVN#39218538: Pizza Hut Japan Official Order App for Android. contains an issue where it fails to verify SSL server certificates

Pizza Hut Japan Official Order App for Android. contains an issue where it fails to verify SSL server certificates.

Impact

A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Pizza Hut Japan Official Order App for Android. 1.1.0.a and earlier

According to the developer, the iOS version is not affected by this vulnerability.