Description
The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NISSAN SECURITIES | Access CX App for Android | prior to Ver2.0.0.1 | — |
| NISSAN SECURITIES | Access CX App for iOS | prior to Ver2.0.2 | — |
References
- JVN#82619692 third-party-advisory
- 96615 vdb-entry