cnvd-2016-04471
Vulnerability from cnvd
Title
Yanko Hernandez Garcia Sushiro App for iOS和for Android中间人攻击漏洞
Description
Yanko Hernandez Garcia Sushiro App是日本Yanko Hernandez Garcia公司开发的一套Sushiro餐厅用于展示日本正宗料理的App。 Yanko Hernandez Garcia Sushiro App for iOS 2.1.16及之前版本和for Android 2.1.16.1及之前版本中存在中间人攻击漏洞，该漏洞源于程序未能验证SSL服务器端证书。攻击者可利用该漏洞实施中间人攻击，窃听加密的通信。
Severity
中
Patch Name
Yanko Hernandez Garcia Sushiro App for iOS和for Android中间人攻击漏洞的补丁
Patch Description
Yanko Hernandez Garcia Sushiro App是日本Yanko Hernandez Garcia公司开发的一套Sushiro餐厅用于展示日本正宗料理的App。 Yanko Hernandez Garcia Sushiro App for iOS 2.1.16及之前版本和for Android 2.1.16.1及之前版本中存在中间人攻击漏洞，该漏洞源于程序未能验证SSL服务器端证书。攻击者可利用该漏洞实施中间人攻击，窃听加密的通信。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已经发布了升级补丁以修复此安全问题，详情请关注厂商主页： http://www.akindo-sushiro.co.jp/

Reference
https://jvn.jp/en/jp/JVN30260727/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000122.html
Impacted products
Name
['Yanko Hernandez Garcia Sushiro App for iOS <=2.1.16', 'Yanko Hernandez Garcia Sushiro App for Android <=2.1.16.1']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-4830"
    }
  },
  "description": "Yanko Hernandez Garcia Sushiro App\u662f\u65e5\u672cYanko Hernandez Garcia\u516c\u53f8\u5f00\u53d1\u7684\u4e00\u5957Sushiro\u9910\u5385\u7528\u4e8e\u5c55\u793a\u65e5\u672c\u6b63\u5b97\u6599\u7406\u7684App\u3002\r\n\r\nYanko Hernandez Garcia Sushiro App for iOS 2.1.16\u53ca\u4e4b\u524d\u7248\u672c\u548cfor Android 2.1.16.1\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u4e2d\u95f4\u4eba\u653b\u51fb\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u9a8c\u8bc1SSL\u670d\u52a1\u5668\u7aef\u8bc1\u4e66\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5b9e\u65bd\u4e2d\u95f4\u4eba\u653b\u51fb\uff0c\u7a83\u542c\u52a0\u5bc6\u7684\u901a\u4fe1\u3002",
  "discovererName": "Yuta Teshima of Cyber Defense Institute, Inc.",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a\r\nhttp://www.akindo-sushiro.co.jp/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-04471",
  "openTime": "2016-07-05",
  "patchDescription": "Yanko Hernandez Garcia Sushiro App\u662f\u65e5\u672cYanko Hernandez Garcia\u516c\u53f8\u5f00\u53d1\u7684\u4e00\u5957Sushiro\u9910\u5385\u7528\u4e8e\u5c55\u793a\u65e5\u672c\u6b63\u5b97\u6599\u7406\u7684App\u3002\r\n\r\nYanko Hernandez Garcia Sushiro App for iOS 2.1.16\u53ca\u4e4b\u524d\u7248\u672c\u548cfor Android 2.1.16.1\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u4e2d\u95f4\u4eba\u653b\u51fb\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u9a8c\u8bc1SSL\u670d\u52a1\u5668\u7aef\u8bc1\u4e66\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5b9e\u65bd\u4e2d\u95f4\u4eba\u653b\u51fb\uff0c\u7a83\u542c\u52a0\u5bc6\u7684\u901a\u4fe1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Yanko Hernandez Garcia Sushiro App for iOS\u548cfor Android\u4e2d\u95f4\u4eba\u653b\u51fb\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Yanko Hernandez Garcia Sushiro App for iOS \u003c=2.1.16",
      "Yanko Hernandez Garcia Sushiro App for Android \u003c=2.1.16.1"
    ]
  },
  "referenceLink": "https://jvn.jp/en/jp/JVN30260727/index.html\r\nhttp://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000122.html",
  "serverity": "\u4e2d",
  "submitTime": "2016-07-01",
  "title": "Yanko Hernandez Garcia Sushiro App for iOS\u548cfor Android\u4e2d\u95f4\u4eba\u653b\u51fb\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.