| Package | Affected versions | Patched versions |
|---|---|---|
| 77 bank | ≤ 2.0.1 | |
| ashigin | ≤ 1.0.4 | |
| dogin | ≤ 3.0.1 | |
| hokuriku bank portal | ≤ 2.0.1 | |
| nagagin | ≤ 1.0.1 | |
| shikoku bank | ≤ 2.0.1 | |
| ikeda senshu bank | ≤ 3.0.4 | |
| tougin | ≤ 1.0.1 |
Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-mismatch, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free