Refine your search

1 vulnerability found for mobiGate App for Android by Nihon Unisys, Ltd.

CVE-2016-7805 (GCVE-0-2016-7805)
Vulnerability from cvelistv5
Published
2017-06-09 16:00
Modified
2024-08-06 02:04
Severity ?
CWE
  • Fails to verify SSL certificates
Summary
The mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
References
http://www.securityfocus.com/bid/94085 vdb-entry, x_refsource_BID
https://jvn.jp/en/jp/JVN27260483/index.html third-party-advisory, x_refsource_JVN
Impacted products
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:04:56.113Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "94085",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94085"
          },
          {
            "name": "JVN#27260483",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN27260483/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "mobiGate App for Android",
          "vendor": "Nihon Unisys, Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "version 2.2.1.2 and earlier"
            }
          ]
        },
        {
          "product": "mobiGate App for iOS",
          "vendor": "Nihon Unisys, Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "version 2.2.4.1 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2016-11-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Fails to verify SSL certificates",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-12T09:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "name": "94085",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94085"
        },
        {
          "name": "JVN#27260483",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "https://jvn.jp/en/jp/JVN27260483/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2016-7805",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "mobiGate App for Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "version 2.2.1.2 and earlier"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "mobiGate App for iOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "version 2.2.4.1 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Nihon Unisys, Ltd."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Fails to verify SSL certificates"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "94085",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94085"
            },
            {
              "name": "JVN#27260483",
              "refsource": "JVN",
              "url": "https://jvn.jp/en/jp/JVN27260483/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2016-7805",
    "datePublished": "2017-06-09T16:00:00.000Z",
    "dateReserved": "2016-09-09T00:00:00.000Z",
    "dateUpdated": "2024-08-06T02:04:56.113Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}