CVE-2016-7812
The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication.
- Score
- CVSS 3.0 3.1 Low
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2017-08-02
- Last modified
- 2024-08-06
- Weaknesses
- CWE-310
Affected products
- Mitsubishi Ufj (Mufg)
- Ltd. App For Android (The Bank Of Tokyo-mitsubishi Ufj Ltd.)
- The Bank Of Tokyo-mitsubishi Ufj (The Bank Of Tokyo-mitsubishi Ufj Ltd.)
References
- http://www.securityfocus.com/bid/94829
- https://jvn.jp/en/vu/JVNVU92900492/
