CVE-2016-4839

🗓️ 12 May 2017 18:00:00Reported by jpcertType

Android Apps Money Forward and associated apps by SOURCENEXT CORPORATION do not properly implement the WebView class, allowing information disclosure via a specially crafted ap

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2016-4839	12 May 201718:00	–	cve
EUVD	EUVD-2016-5821	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	JVN#61297210: Money Forward Apps for Android vulnerable in the WebView class	20 Sep 201600:00	–	jvn
Japan Vulnerability Notes	Money Forward Apps for Android vulnerable in the WebView class	20 Sep 201606:19	–	jvn
NVD	CVE-2016-4839	12 May 201718:29	–	nvd
OSV	CVE-2016-4839	12 May 201718:29	–	osv
Prion	Design/Logic Flaw	12 May 201718:29	–	prion

[
  {
    "product": "Money Forward",
    "vendor": "Money Foward, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v7.18.0"
      }
    ]
  },
  {
    "product": "Money Forward for The Gunma Bank",
    "vendor": "Money Foward, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v1.2.0"
      }
    ]
  },
  {
    "product": "Money Forward for SHIGA BANK",
    "vendor": "Money Foward, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v1.2.0"
      }
    ]
  },
  {
    "product": "Money Forward for SHIZUOKA BANK",
    "vendor": "Money Foward, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v1.4.0"
      }
    ]
  },
  {
    "product": "Money Forward for SBI Sumishin Net Bank",
    "vendor": "Money Foward, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v1.6.0"
      }
    ]
  },
  {
    "product": "Money Forward for Tokai Tokyo Securities",
    "vendor": "Money Foward, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v1.4.0"
      }
    ]
  },
  {
    "product": "Money Forward for THE TOHO BANK",
    "vendor": "Money Foward, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v1.3.0"
      }
    ]
  },
  {
    "product": "Money Forward for YMFG",
    "vendor": "Money Foward, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v1.5.0"
      }
    ]
  },
  {
    "product": "Money Forward for AppPass",
    "vendor": "SOURCENEXT CORPORATION",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v7.18.3"
      }
    ]
  },
  {
    "product": "Money Forward for au SMARTPASS",
    "vendor": "SOURCENEXT CORPORATION",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v7.18.0"
      }
    ]
  },
  {
    "product": "Money Forward for Chou Houdai",
    "vendor": "SOURCENEXT CORPORATION",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v7.18.3"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/93035
corp	www.corp.moneyforward.com/info/20160920-mf-android/
jvn	www.jvn.jp/en/jp/JVN61297210/index.html
sourcenext	www.sourcenext.com/support/i/160725_1

15 May 2017 09:57Current

5.2Medium risk

Vulners AI Score5.2

EPSS0.00555