CVE-2023-29501

Name: CVE-2023-29501
Creator: NVD / NIST
Published: 2023-06-13T10:15:10.25+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 4.8/10EPSS 0.28%

Last modified Jun 17, 2026

CVE-2023-29501 is a medium-severity vulnerability rated 4.8/10 on the CVSS scale. Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier are vulnerable to improper server certificate verification. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.. EPSS estimates a 0.28% chance of exploitation in the next 30 days.

Description

Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier are vulnerable to improper server certificate verification. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.

Metrics

CVSS 3.1

4.8/10

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS Probability

0.28%

19.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-295

Affected Software

Vendor	Product	Versions
Runsystem	Jiyu Kukan Toku-Toku Coupon	<= 3.5.0

References

https://apps.apple.com/jp/app/%E8%87%AA%E9%81%8A%E7%A9%BA%E9%96%93%E3%81%A8%E3%81%8F%E3%81%A8%E3%81%8F%E3%82%AF%E3%83%BC%E3%83%9D%E3%83%B3/id608149604Product
https://jvn.jp/en/jp/JVN33836375/Third Party Advisory
https://play.google.com/store/apps/details?id=jp.runsystemProduct
https://www.runsystem.co.jp/g1-pr/17570Vendor Advisory
https://apps.apple.com/jp/app/%E8%87%AA%E9%81%8A%E7%A9%BA%E9%96%93%E3%81%A8%E3%81%8F%E3%81%A8%E3%81%8F%E3%82%AF%E3%83%BC%E3%83%9D%E3%83%B3/id608149604Product
https://jvn.jp/en/jp/JVN33836375/Third Party Advisory
https://play.google.com/store/apps/details?id=jp.runsystemProduct
https://www.runsystem.co.jp/g1-pr/17570Vendor Advisory

Timeline

Published: Jun 13, 2023
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2023-29501?

How severe is CVE-2023-29501?

CVE-2023-29501 has a CVSS score of 4.8/10 (MEDIUM severity). The EPSS model estimates a 0.28% probability of exploitation in the next 30 days.

How do I fix CVE-2023-29501?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-29501?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST