Unscored CVE-2013-4700 EUVD-2013-4553GHSA-4pr8-9cmx-vj4x

The Yahoo! Japan Shopping application 1.4 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-…

Published Aug 21, 2013 · Updated Sep 17, 2024 · Assigned by jpcert

Description

The Yahoo! Japan Shopping application 1.4 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

References

JVNDB-2013-000079 third-party-advisory
JVN#75084836 third-party-advisory