Unscored CVE-2016-1221 EUVD-2016-2322GHSA-m574-p9pr-7xfp

Jetstar App for iOS before 3.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof ser…

Published Apr 21, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Jetstar App for iOS before 3.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

References

JVN#43529183 third-party-advisory
JVNDB-2016-000067 third-party-advisory