PT-2021-5138

Name of the Vulnerable Software and Affected Versions MasterCard, Visa, American Express affected versions not specified Apple Pay affected versions not specified Samsung Pay affected versions not specified GPay affected versions not specified Description The issue is related to insufficient...

PT-2021-5137

Name of the Vulnerable Software and Affected Versions MasterCard Tokenisation Service MDES affected versions not specified Description The issue is related to the exploitation of weaknesses in the GPay/MasterCard pair, potentially allowing an attacker to clone transactions and make payments...

PT-2021-07: GPay payments above NoCVM limits, CryptoATC out of order

EMV standards which are used as a predecessor of mobile wallets, do not put some mandatory fields as a cryptogram input. These fields are crucial for risk management steps, and their tampering can bypass payment restrictions. During the transaction authorisation, MDES does not decline payments wi...