CVE-2016-4818 DMMFX Trade for Android 1.5.0 and earlier, DMMFX DEMO Trade for Android 1.5.0 and earlier, and GAITAMEJAPAN FX Trade for Android 1.4.0 and earlier do not verify SSL certificates.
MediumCVSS 5.9
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
DMMFX Trade for Android 1.5.0 and earlier, DMMFX DEMO Trade for Android 1.5.0 and earlier, and GAITAMEJAPAN FX Trade for Android 1.4.0 and earlier do not verify SSL certificates.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dmmfx demo trade | <= 1.5.0 | No fix listed |
| dmmfx trade | <= 1.5.0 | No fix listed |
| dmm gaitamejapan fx trade | <= 1.4.0 | No fix listed |
References
- fx.dmm.com vendor-advisory
- JVN#40898764 third-party-advisory vdb-entry
- JVNDB-2016-000092 third-party-advisory vdb-entry
- www.gaitamejapan.com third-party-advisory
- jvn.jp third-party-advisory vdb-entry