Gaku Taniguchi

**Name of the Vulnerable Software and Affected Versions** mobiGate App for Android versions 2.2.1.2 and earlier mobiGate App for iOS versions 2.2.4.1 and earlier **Description** The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates from SSL servers. **Recommendations** For mobiGate App for Android versions 2.2.1.2 and earlier, update to a version that verifies X.509 certificates from SSL servers. For mobiGate App for iOS versions 2.2.4.1 and earlier, update to a version that verifies X.509 certificates from SSL servers.

**Name of the Vulnerable Software and Affected Versions** WAON "Service Application" for Android versions 1.4.1 and earlier **Description** The issue is related to the failure of the application to verify SSL certificates. **Recommendations** For WAON "Service Application" for Android versions 1.4.1 and earlier, update to a version that properly verifies SSL certificates.

**Name of the Vulnerable Software and Affected Versions** Coordinate Plus App for Android versions 1.0.2 and earlier Coordinate Plus App for iOS versions 1.0.2 and earlier **Description** The issue concerns the failure to verify SSL certificates. This could potentially allow for man-in-the-middle attacks. **Recommendations** For Coordinate Plus App for Android versions 1.0.2 and earlier, update to a version that properly verifies SSL certificates. For Coordinate Plus App for iOS versions 1.0.2 and earlier, update to a version that properly verifies SSL certificates.

**Name of the Vulnerable Software and Affected Versions** DMMFX Trade for Android versions 1.5.0 and earlier DMMFX DEMO Trade for Android versions 1.5.0 and earlier GAITAMEJAPAN FX Trade for Android versions 1.4.0 and earlier **Description** The issue is related to the failure to verify SSL certificates. This could potentially allow for man-in-the-middle attacks. **Recommendations** For DMMFX Trade for Android versions 1.5.0 and earlier, update to a version that properly verifies SSL certificates. For DMMFX DEMO Trade for Android versions 1.5.0 and earlier, update to a version that properly verifies SSL certificates. For GAITAMEJAPAN FX Trade for Android versions 1.4.0 and earlier, update to a version that properly verifies SSL certificates.