PT-2017-7932 · Tokyo Star Bank · Tokyo Star Bank App For Ios+1

Yuji Tounai · Published 2017-04-21 · Updated 2021-09-09 · CVE-2016-1184

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Tokyo Star bank App for Android versions prior to 1.4 Tokyo Star bank App for iOS versions prior to 1.4

Description The issue concerns the failure to validate SSL certificates. This could potentially allow for man-in-the-middle attacks.

Recommendations For Tokyo Star bank App for Android versions prior to 1.4, update to version 1.4 or later. For Tokyo Star bank App for iOS versions prior to 1.4, update to version 1.4 or later.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2016-1184

Affected Products

Tokyo Star Bank App For Android

Tokyo Star Bank App For Ios

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-1184 · Security Note
• http://tokyostarbank.co.jp/important151222.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1184 · Vendor Advisory
• http://jvn.jp/en/jp/JVN00272277/index.html · Note
• http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000049.html · Note