Improper Certificate Validation in γγΈγ©γ’γγͺ App for iOS
CVE-2025-60022
2.3LOW
What is CVE-2025-60022?
An improper certificate validation vulnerability exists in the γγΈγ©γ’γγͺ for iOS prior to version 80.10.00. This vulnerability can be exploited in a man-in-the-middle attack scenario, whereby an attacker may intercept and modify encrypted communications between users and the application. Users of the affected version are advised to update their applications to prevent potential eavesdropping and data tampering.
Affected Version(s)
'γγΈγ©γ’γγͺ' App for iOS prior to ver.80.10.00
References
CVSS V4
Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown
CVSS V3.0
Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved