CVE-2023-29501

Published: Jun 13, 2023Modified: Jun 17, 2026

4.8

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.2 / Impact: 2.5

Source: NVD

Description

Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier are vulnerable to improper server certificate verification. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.

Affected (2)

Products: Runsystem: Jiyu Kukan Toku Toku Coupon

1 product

Jiyu Kukan Toku Toku Coupon

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Runsystem Jiyu Kukan Toku Toku Coupon	Up to 3.5.0
Runsystem Jiyu Kukan Toku Toku Coupon	Up to 3.5.0

Related CWEs

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (8)

https://apps.apple.com/jp/app/%E8%87%AA%E9%81%8A%E7%A9%BA%E9%96%93%E3%81%A8%E3%81%8F%E3%81%A8%E3%81%8F%E3%82%AF%E3%83%BC%E3%83%9D%E3%83%B3/id608149604

Source: vultures@jpcert.or.jp

Product

https://jvn.jp/en/jp/JVN33836375/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://play.google.com/store/apps/details?id=jp.runsystem

Source: vultures@jpcert.or.jp

Product

https://www.runsystem.co.jp/g1-pr/17570

Source: vultures@jpcert.or.jp

Vendor Advisory

https://apps.apple.com/jp/app/%E8%87%AA%E9%81%8A%E7%A9%BA%E9%96%93%E3%81%A8%E3%81%8F%E3%81%A8%E3%81%8F%E3%82%AF%E3%83%BC%E3%83%9D%E3%83%B3/id608149604

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://jvn.jp/en/jp/JVN33836375/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://play.google.com/store/apps/details?id=jp.runsystem

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://www.runsystem.co.jp/g1-pr/17570

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.