What’s Vulnerable › Vulnerabilities

CVE-2019-6024

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-12-26 · updated 2026-06-17
• Weakness: CWE-522

Description

Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and obtain the user's authentication information via a malicious application created by the third party.

Affected products

• Rakuten, Inc. Rakuma App: through 7.15.0; through 7.16.4

References

• http://jvn.jp/en/jp/JVN41566067/index.html
• https://apps.apple.com/jp/app/furimaapuri-furiru-fril-fasshon/id523497998
• https://play.google.com/store/apps/details?id=jp.co.fablic.fril&hl=en
• http://jvn.jp/en/jp/JVN41566067/index.html
• https://apps.apple.com/jp/app/furimaapuri-furiru-fril-fasshon/id523497998
• https://play.google.com/store/apps/details?id=jp.co.fablic.fril&hl=en

Get alerted when CVE-2019-6024 or the next vulnerability affects your stack