CVE-2016-4832

The WAON Service App for Android (version 1.4.1 and earlier) fails to verify SSL server certificates, enabling potential MITM eavesdropping on encrypted connections. This vulnerability is documented by multiple sources (e.g., JVNDB-2016-000124 and JVN #68364327) and is tied to the WAON Android ap...