CVE-2018-16179

CVE-2018-16179

EPSS 0.5%

The Mizuho Direct App for Android version 3.13.0 and earlier does not verify server certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Produtos afetados

Mizuho Bank, Ltd. · Mizuho Direct App for Android

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://jvn.jp/en/vu/JVNVU91640357/index.html https://play.google.com/store/apps/details?id=jp.co.mizuhobank.banking