CVE-2019-6024: Medium severity rakuten rakuma vulnerability
Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and obtain the user's authentication information via a malicious application created by the third party.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-6024?
CVE-2019-6024 is a vulnerability in the Rakuma App for Android and iOS that allows an attacker to bypass authentication and obtain the user's authentication information.
What is the severity of CVE-2019-6024?
The severity of CVE-2019-6024 is medium, with a CVSS score of 6.5.
Which versions of Rakuma App are affected by CVE-2019-6024?
Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier are affected by CVE-2019-6024.
How can an attacker exploit CVE-2019-6024?
An attacker can exploit CVE-2019-6024 by creating a malicious application that bypasses authentication and obtains the user's authentication information.
Is there a fix for CVE-2019-6024?
Yes, updating Rakuma App to the latest version will fix CVE-2019-6024.