Skip to content
OpenAdvisories
Unscored CVE-2018-0622 EUVD-2018-1432GHSA-xwmr-ccg5-4jf3

The DHC Online Shop App for Android version 3.2.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-…

Published Jul 26, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: DHC Product: DHC Online Shop App for Android Platform: Android

Description

The DHC Online Shop App for Android version 3.2.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

VendorProductAffectedFixed
DHC DHC Online Shop App for Android version 3.2.0 and earlier —

References