Vulnerabilities (CVE)

Filtered by vendor Ana Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-0611 1 Ana 1 Ana 2023-12-10 5.8 MEDIUM 7.4 HIGH
The ANA App for iOS version 4.0.22 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2015-5666 1 Ana 1 All Nippon Airways 2023-12-10 4.3 MEDIUM 5.9 MEDIUM
ANA App for Android 3.1.1 and earlier, and ANA App for iOS 3.3.6 and earlier does not verify SSL certificates.