CVE-2018-0622 The DHC Online Shop App for Android version 3.2.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive inform...
HighCVSS 7.4
EPSS 0.60%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DHC Online Shop App for Android version 3.2.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dhc online shop | <= 3.2.0 | No fix listed |
| DHC Online Shop App for Android | = version 3.2.0 and earlier | No fix listed |
References
- JVN#77409513 third-party-advisory vdb-entry