CVEvulnerability
CVE-2016-4818
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-04-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-295
Description
DMMFX Trade for Android 1.5.0 and earlier, DMMFX DEMO Trade for Android 1.5.0 and earlier, and GAITAMEJAPAN FX Trade for Android 1.4.0 and earlier do not verify SSL certificates.
Affected configurations
• dmm dmmfx demo trade (<= 1.5.0)
• dmm dmmfx trade (<= 1.5.0)
• dmm gaitamejapan fx trade (<= 1.4.0)
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness
References
- http://fx.dmm.com/information/press/2016/2016053001/ Vendor Advisory
- http://jvn.jp/en/jp/JVN40898764/index.html Third Party Advisory, VDB Entry
- http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000092.html Third Party Advisory, VDB Entry
- http://www.gaitamejapan.com/support/news/2016/2016053001/ Third Party Advisory
- https://jvn.jp/en/jp/JVN40898764/995849/index.html Third Party Advisory, VDB Entry
- http://fx.dmm.com/information/press/2016/2016053001/ Vendor Advisory
- http://jvn.jp/en/jp/JVN40898764/index.html Third Party Advisory, VDB Entry
- http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000092.html Third Party Advisory, VDB Entry
- http://www.gaitamejapan.com/support/news/2016/2016053001/ Third Party Advisory
- https://jvn.jp/en/jp/JVN40898764/995849/index.html Third Party Advisory, VDB Entry