Code injection

2021-10-1309:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.4%

JSON

The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate.

CPENameOperatorVersion
snkrdunklt2.2.0

CPE	Name	Operator	Version
	snkrdunk	lt	2.2.0

References

jvn.jp/en/jp/JVN10168753/index.html

snkrdunk.com/information/37/