Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-2110

The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof ser

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NISSAN SECURITIES CO., LTD. Access CX App for Android

  • prior to Ver2.0.0.1affected

NISSAN SECURITIES CO., LTD. Access CX App for iOS

  • prior to Ver2.0.2affected

References