medium5.9
CVE-2015-5666
ANA App for Android 3.1.1 and earlier, and ANA App for iOS 3.3.6 and earlier does not verify SSL certificates.
Impact
ANA App for Android 3.1.1 and earlier, and ANA App for iOS 3.3.6 and earlier does not verify SSL certificates.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ana | All Nippon Airways | through 3.1.1 through 3.3.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN25086409/index.html
- http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000164.html
- http://www.securityfocus.com/bid/77344
- http://jvn.jp/en/jp/JVN25086409/index.html
- http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000164.html
- http://www.securityfocus.com/bid/77344