CVE-2022-34156

'Hulu / フールー' App for iOS versions prior to 3.0.81 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.

Score

CVSS 3.1 4.8 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2022-08-16

Last modified

2024-08-03

Weaknesses

CWE-295

Affected products

• Hulu App For Ios (Hj Holdings Inc.)
• Hulu (Hjholdings)

References

• https://jvn.jp/en/jp/JVN81563390/index.html