Information disclosure

2017-05-1518:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.6%

JSON

The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CPENameOperatorVersion
shopwell_-_healthy_diet_\\&_grocery_food_scannereq5.4.0
shopwell_-_healthy_diet_\\&_grocery_food_scannereq5.4.1
shopwell_-_healthy_diet_\\&_grocery_food_scannereq5.3.7
shopwell_-_healthy_diet_\\&_grocery_food_scannereq5.3.9
shopwell_-_healthy_diet_\\&_grocery_food_scannereq5.3.8
shopwell_-_healthy_diet_\\&_grocery_food_scannereq5.4.2

Name	Operator	Version
shopwell_-_healthy_diet_\\&_grocery_food_scanner	eq	5.4.0
shopwell_-_healthy_diet_\\&_grocery_food_scanner	eq	5.4.1
shopwell_-_healthy_diet_\\&_grocery_food_scanner	eq	5.3.7
shopwell_-_healthy_diet_\\&_grocery_food_scanner	eq	5.3.9
shopwell_-_healthy_diet_\\&_grocery_food_scanner	eq	5.3.8
shopwell_-_healthy_diet_\\&_grocery_food_scanner	eq	5.4.2