CVE-2015-5639 niconico App for iOS before 6.38 does not verify SSL certificates which could allow remote attackers to execute man-in-the-middle attacks.
HighCVSS 7.4
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
niconico App for iOS before 6.38 does not verify SSL certificates which could allow remote attackers to execute man-in-the-middle attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dwango niconico | <= 6.37 | No fix listed |
References
- blog.nicovideo.jp vendor-advisory
- JVN#20355129 third-party-advisory vdb-entry
- JVNDB-2015-000137 third-party-advisory vdb-entry
- 76906 third-party-advisory vdb-entry