PT-2017-8535 · Dmmfx+1 · Dmmfx Trade+2

Gaku Taniguchi · Publicado 2017-04-20 · Atualizado 2017-04-26 · CVE-2016-4818

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions DMMFX Trade for Android versions 1.5.0 and earlier DMMFX DEMO Trade for Android versions 1.5.0 and earlier GAITAMEJAPAN FX Trade for Android versions 1.4.0 and earlier

Description The issue is related to the failure to verify SSL certificates. This could potentially allow for man-in-the-middle attacks.

Recommendations For DMMFX Trade for Android versions 1.5.0 and earlier, update to a version that properly verifies SSL certificates. For DMMFX DEMO Trade for Android versions 1.5.0 and earlier, update to a version that properly verifies SSL certificates. For GAITAMEJAPAN FX Trade for Android versions 1.4.0 and earlier, update to a version that properly verifies SSL certificates.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2016-4818

Produtos afetados

Dmmfx Demo Trade

Dmmfx Trade

Gaitamejapan Fx Trade

Referências · 7

• https://osv.dev/vulnerability/CVE-2016-4818 · Aviso do Fabricante
• https://jvn.jp/en/jp/JVN40898764/995849/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-4818 · Nota de Segurança
• http://gaitamejapan.com/support/news/2016/2016053001 · Nota
• http://jvn.jp/en/jp/JVN40898764/index.html · Nota
• http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000092.html · Nota
• http://fx.dmm.com/information/press/2016/2016053001 · Aviso do Fabricante