Security Advisory

CVE-2024-27440

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-03-13 05:40:22
Last updated 2024-08-05 13:41:39
Assigner jpcert
CVSS score not scored
State PUBLISHED

Description

The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don't properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate.