Unscored CVE-2016-1210 EUVD-2016-2311GHSA-532w-fqvr-qj43

The 105 BANK app 1.0 and 1.1 for Android and 1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middl…

Published Apr 21, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Description

The 105 BANK app 1.0 and 1.1 for Android and 1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

References

JVNDB-2016-000065 third-party-advisory
JVN#11877654 third-party-advisory