[FullDisclosure] SEC Consult SA-20231128 :: Missing Certificate Validation & User Enumeration in Anveo Mobile App and Server

[hinoshiba]

Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Dec 12

SEC Consult Vulnerability Lab Security Advisory < 20231128-0 >

=======================================================================

title: Missing Certificate Validation & User Enumeration

product: Anveo Mobile App and Server

vulnerable version: Mobile App: 10.0.0.359 / 2016-07-13; Server: 11.0.0.5

fixed version: -

CVE number: -

impact: Medium

homepage:...

https://seclists.org/fulldisclosure/2023/Dec/15