Skip to content
OpenAdvisories
Unscored CVE-2018-0611 EUVD-2018-1421GHSA-hhqv-2p5r-3r8r

The ANA App for iOS version 4.0.22 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attacker…

Published Jun 26, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: ALL NIPPON AIRWAYS Product: ANA App for iOS Platform: iOS

Description

The ANA App for iOS version 4.0.22 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

VendorProductAffectedFixed
ALL NIPPON AIRWAYS ANA App for iOS version 4.0.22 and earlier —

References