{"id":"CVE-2024-27440","aliases":["EUVD-2024-24643","GHSA-6h99-8764-6j4p"],"status":"published","title":"The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for...","description":"The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don't properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate.","severity":{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00224,"percentile":0.13149,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-295"],"published":"2024-03-13T05:40:22Z","modified":"2026-06-17T07:19:54Z","products":[{"vendor":"toyoko inn it solution co., ltd.","product":"toyoko inn official app for android"},{"vendor":"toyoko inn it solution co., ltd.","product":"toyoko inn official app for ios"},{"vendor":"toyoko_inn","product":"toyoko_inn"}],"references":[{"url":"https://apps.apple.com/jp/app/%E3%83%9B%E3%83%86%E3%83%AB%E6%9D%B1%E6%A8%AAinn-%E6%9D%B1%E6%A8%AA%E3%82%A4%E3%83%B3-%E5%85%AC%E5%BC%8F%E3%82%A2%E3%83%97%E3%83%AA/id1439388270","tags":["x_transferred"]},{"url":"https://play.google.com/store/apps/details?id=com.toyoko_inn.toyokoandroid","tags":["x_transferred"]},{"url":"https://jvn.jp/en/jp/JVN52919306/","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27440"},{"url":"https://jvn.jp/en/jp/JVN52919306"},{"url":"https://github.com/advisories/GHSA-6h99-8764-6j4p"}],"sources":{"cve":[{"id":"CVE-2024-27440","description":"The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don't properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate.","status":"published","published":"2024-03-13T05:40:22.838Z","modified":"2024-08-05T13:41:39.271Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:34:12.982241Z"}],"euvd":[{"id":"EUVD-2024-24643","description":"The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don't properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate.","status":"published","published":"2024-03-13T05:40:22Z","modified":"2024-08-05T13:41:39Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T02:39:22.420171Z"}],"ghsa":[{"id":"GHSA-6h99-8764-6j4p","title":"The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for...","description":"The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don't properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate.","status":"published","published":"2024-03-13T06:30:51Z","modified":"2024-08-05T15:30:51Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:57:51.247803Z"}],"nvd":[{"id":"CVE-2024-27440","description":"The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don't properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate.","status":"published","published":"2024-03-13T06:15:52.273Z","modified":"2026-06-17T07:19:54.29Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:09:40.831473Z"}]}}