PT-2017-7932 · Tokyo Star Bank · Tokyo Star Bank App For Ios+1

Yuji Tounai · Publicado 2017-04-21 · Atualizado 2021-09-09 · CVE-2016-1184

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Tokyo Star bank App for Android versions prior to 1.4 Tokyo Star bank App for iOS versions prior to 1.4

Description The issue concerns the failure to validate SSL certificates. This could potentially allow for man-in-the-middle attacks.

Recommendations For Tokyo Star bank App for Android versions prior to 1.4, update to version 1.4 or later. For Tokyo Star bank App for iOS versions prior to 1.4, update to version 1.4 or later.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2016-1184

Produtos afetados

Tokyo Star Bank App For Android

Tokyo Star Bank App For Ios

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-1184 · Nota de Segurança
• http://tokyostarbank.co.jp/important151222.html · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN00272277/index.html · Nota
• https://osv.dev/vulnerability/CVE-2016-1184 · Aviso do Fabricante
• http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000049.html · Nota