Skip to content

CVE-2016-7812 The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to....

LowCVSS 3.1 EPSS 0.82%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication.

Affected products

ProductAffected versionsFixed in
mufg mitsubishi ufj <= 5.2.2 No fix listed
mufg mitsubishi ufj = 5.3.1 No fix listed
The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android = ver5.3.1 No fix listed
The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android = ver5.2.2 and earlier No fix listed

References

  • 94829 third-party-advisory vdb-entry
  • jvn.jp third-party-advisory vdb-entry