CVE-2020-5522

Summary

The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected Software

VendorProductVersion RangeStatus
Fuji Xerox Co.,Ltd.kantan netprint App for Android2.0.3 and earlieraffected

Weaknesses

  • Fails to verify SSL certificates

ADP Enrichment

CVE Program Container

Additional References

References