3.1low
CVE-2016-7812
The Bank of Tokyo-Mitsubishi UFJ, Ltd.
Published 9 y ago · modified 4 mo ago · JSON
CVSS
3.1
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 57%
Public exploits
0
none known
Summary
The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication.
Exploit prediction (EPSS)
0.82% probability of exploitation in the next 30 days, higher than 57% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 3.1 | CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Affected products
- The Bank of Tokyo-Mitsubishi UFJ, Ltd. The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android
Classification
- Weakness
- CWE-310 Cryptographic Issues
References
- jvn.jp /en/vu/JVNVU92900492/ · x_refsource_MISC, x_transferred
- securityfocus.com /bid/94829 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2016-7812
- NVD: CVE-2016-7812
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.