CVE-2022-29482 - 'Mobaoku-Auction&Flea Market' App for iOS versions prior to 5.5.16 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack

Back Back to CVE browser

LOW

'Mobaoku-Auction&Flea Market' App for iOS versions prior to 5.5.16 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack

Published Jun 14, 2022

3.7

LOW

CVSS 3.1

EPSS 0.36%

Description

'Mobaoku-Auction&Flea Market' App for iOS versions prior to 5.5.16 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.

Affected products

Vendor DeNA Co., Ltd. Product Mobaoku-Auction & Flea Market App for iOS Default
n/a
- Version
  versions prior to 5.5.16
  Status
  affected
  Constraints
  -