Description
The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don't properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Toyoko Inn IT Solution | Toyoko Inn official App for iOS | prior to 1.13.0 | — |
| Toyoko Inn IT Solution | Toyoko Inn official App for Android | prior 1.3.14 | — |