Medium severity6.5NVD Advisory· Published Dec 26, 2019· Updated Jun 17, 2026

CVE-2019-6024

Description

Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and obtain the user's authentication information via a malicious application created by the third party.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rakuten/Rakuma2 versions
cpe:2.3:a:rakuten:rakuma:*:*:*:*:*:android:*:*+ 1 more
- cpe:2.3:a:rakuten:rakuma:*:*:*:*:*:android:*:*range: <=7.15.0
- cpe:2.3:a:rakuten:rakuma:*:*:*:*:*:iphone_os:*:*range: <=7.16.4
Rakuma/Rakuma Appllm-create
Range: <=7.15.0 (Android), <=7.16.4 (iOS)
Rakuten, Inc./Rakuma Appv5
Range: for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN41566067/index.htmlnvdThird Party AdvisoryVDB Entry
apps.apple.com/jp/app/furimaapuri-furiru-fril-fasshon/id523497998nvdProductRelease Notes
play.google.com/store/apps/detailsnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000