JVN#52919306: Toyoko Inn official App vulnerable to improper server certificate verification

Toyoko Inn official App provided by Toyoko Inn IT Solution Co., Ltd. is vulnerable to improper server certificate verification (CWE-295).

Impact

A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.

Solution

Update the application
Update the application to the latest version according to the information provided by the developer.

Products Affected

• Toyoko Inn official App for iOS versions prior to 1.13.0
• Toyoko Inn official App for Android versions prior 1.3.14