Vulnerability Description
Tokyo Star bank App for Android before 1.4 and Tokyo Star bank App for iOS before 1.4 do not validate SSL certificates.
CVSS Score
5.9
MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tokyostarbank | Tokyo Star Bank | <= 1.3 |
Related Weaknesses (CWE)
References
- http://jvn.jp/en/jp/JVN00272277/index.htmlThird Party AdvisoryVDB Entry
- http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000049.htmlThird Party AdvisoryVDB Entry
- http://www.tokyostarbank.co.jp/important151222.htmlVendor Advisory
- http://jvn.jp/en/jp/JVN00272277/index.htmlThird Party AdvisoryVDB Entry
- http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000049.htmlThird Party AdvisoryVDB Entry
- http://www.tokyostarbank.co.jp/important151222.htmlVendor Advisory
FAQ
What is CVE-2016-1184?
CVE-2016-1184 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Tokyo Star bank App for Android before 1.4 and Tokyo Star bank App for iOS before 1.4 do not validate SSL certificates.
How severe is CVE-2016-1184?
CVE-2016-1184 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-1184?
Check the references section above for vendor advisories and patch information. Affected products include: Tokyostarbank Tokyo Star Bank.