Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and obtain the users authentication information via a malicious application created by the third party.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rakuma | Rakuten | * | 7.15.0 (including) |
| Rakuma | Rakuten | * | 7.16.4 (including) |