Security Advisory

CVE-2018-7295

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-05-23 12:00:00

Last updated 2024-08-05 06:24:11

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a Communication Channel, allowing a man-in-the-middle attacker to steal user credentials because a session retrieves global.js via http before proceeding to use https. This is fixed in Patch 4.3.

← Browse all CVEs View on cve.org ↗