CVE-2015-5639

niconico App for iOS before 6.38 does not verify SSL certificates which could allow remote attackers to execute man-in-the-middle attacks...

CVE-2015-5639

The CVE-2015-5639 case concerns the niconico App for iOS by DWANGO Co., Ltd. The connected documents confirm that the app fails to verify SSL server certificates, enabling potential man-in-the-middle attacks. Affected version: 6.37 and earlier. Impact described: an attacker could eavesdrop on enc...

JVN#20355129: niconico App for iOS fails to verify SSL server certificates

niconico App for iOS provided by DWANGO Co., Ltd. fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided by the...