Code injection

2019-01-0923:29:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON

The Mizuho Direct App for Android version 3.13.0 and earlier does not verify server certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CPENameOperatorVersion
mizuho_direct_applicationle3.13.0

CPE	Name	Operator	Version
	mizuho_direct_application	le	3.13.0

References

jvn.jp/en/vu/JVNVU91640357/index.html

play.google.com/store/apps/details?id=jp.co.mizuhobank.banking