CVE-2019-6024

Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and obtain the user's authentication information via a malicious application created by the third party.

Score

CVSS 3.1 6.5 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2019-12-26

Last modified

2024-08-04

Weaknesses

CWE-522

Affected products

• Rakuma (Rakuten)
• Rakuma App (Rakuten Inc.)

References

• http://jvn.jp/en/jp/JVN41566067/index.html
• https://apps.apple.com/jp/app/furimaapuri-furiru-fril-fasshon/id523497998
• https://play.google.com/store/apps/details?id=jp.co.fablic.fril&hl=en