CVE-2015-2988

ALTO 7.4CVE-2015-2988 · Published 10/10/2017 · updated 17/06/2026

In breve

CVE-2015-2988 è una vulnerabilità ALTO (CVSS 7.4) che riguarda rakuten card (rakutencard).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.0%, superiore al 63.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
rakuten card rakutencard	`= 5.2.0= 5.2.1= 5.2.2= 5.2.3= 5.2.4`	No fix yet

Description

Rakuten card App for iOS 5.2.0 through 5.2.4 does not verify SSL certificates which might allow remote attackers to execute man-in-the-middle attacks.

References

jvn.jp/en/jp/JVN81207766/index.html · Third Party Advisory
jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000120.html · Third Party Advisory
securityfocus.com/bid/76531 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free