JVN#14522790: Smartphone Passbook fails to verify SSL server certificates

2015-02-13T00:00:00
ID JVN:14522790
Type jvn
Reporter Japan Vulnerability Notes
Modified 2015-05-20T00:00:00

Description

## Description

Smartphone Passbook provided by Ogaki Kyoritsu bank Ltd. fails to verify SSL server certificates.

## Impact

A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.

## Solution

Update the Software
Update to the latest version according to the information provided by the developer.

## Products Affected

  • Smartphone Passbook Ver.1.0.0