Read the docs
TI-2022-15072 Aliases CVE-2022-34156GHSA-mjxq-hc33-93vp

Improper certificate validation in HJ Holdings, Inc. 'Hulu / フールー' App for iOS

Priority LOW 22CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Spoofing
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-295.

Summary

'Hulu / フールー' App for iOS versions prior to 3.0.81 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.

Why it matters now

EPSS 0.00252 16th percentileScored 2026-11-07
Fix Fixed 'Hulu / フールー' App for iOS (HJ Holdings, Inc.): 3.0.81

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HJ Holdings, Inc.'Hulu / フールー' App for iOSbefore 3.0.813.0.81Patch availableCNA
  • 'Hulu / フールー' App for iOS VendorHJ Holdings, Inc. Affected before 3.0.81 Fixed in 3.0.81 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:hjholdings:hulu:*:*:*:*:*:iphone_os:*:*before 3.0.81VulnerableHJ Holdings, Inc.
  • cpe:2.3:a:hjholdings:hulu:*:*:*:*:*:iphone_os:*:* Versions before 3.0.81 Vulnerable ·HJ Holdings, Inc.

Remediation

  • Fix · CNA 'Hulu / フールー' App for iOS (HJ Holdings, Inc.) Fixed in 3.0.81

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-34156
  2. 2026-10-03 Alias added: GHSA-mjxq-hc33-93vp

References

Advisory 1

  • TI-2022-16178 Hard-coded credentials in HJ Holdings, Inc. 'Hulu / フールー' App for Android CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences