Unscored CVE-2022-34156 EUVD-2022-37171GHSA-mjxq-hc33-93vp

'Hulu / フールー' App for iOS versions prior to 3.0.81 improperly verifies server certificates, which may allow an attacker to eavesdrop on an …

Published Aug 16, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: HJ Holdings Product: 'Hulu / フールー' App for iOS Platform: iOS

Description

'Hulu / フールー' App for iOS versions prior to 3.0.81 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.

Affected products

Vendor	Product	Affected	Fixed
HJ Holdings	'Hulu / フールー' App for iOS	versions prior to 3.0.81	—

References

https://jvn.jp/en/jp/JVN81563390/index.html