CVE-2015-5666 ANA App for Android 3.1.1 and earlier, and ANA App for iOS 3.3.6 and earlier does not verify SSL certificates.
MediumCVSS 5.9
EPSS 0.90%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ANA App for Android 3.1.1 and earlier, and ANA App for iOS 3.3.6 and earlier does not verify SSL certificates.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ana all nippon airways | <= 3.1.1 | No fix listed |
| ana all nippon airways | <= 3.3.6 | No fix listed |
References
- JVN#25086409 third-party-advisory vdb-entry
- JVNDB-2015-000164 third-party-advisory vdb-entry
- 77344 third-party-advisory vdb-entry