CVE-2016-4818

MEDIUM

DMMFX Trade and DMMFX DEMO Trade < 1.5.0 and GAITAMEJAPAN FX Trade < 1.4.0 - Improper Certificate Validation

Title source: llm
STIX 2.1

Description

DMMFX Trade for Android 1.5.0 and earlier, DMMFX DEMO Trade for Android 1.5.0 and earlier, and GAITAMEJAPAN FX Trade for Android 1.4.0 and earlier do not verify SSL certificates.

References (5)

Core 5
Core References
Third Party Advisory x_refsource_confirm
http://www.gaitamejapan.com/support/news/2016/2016053001/
Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000092.html
Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN40898764/index.html
Vendor Advisory x_refsource_confirm
http://fx.dmm.com/information/press/2016/2016053001/
Third Party Advisory, VDB Entry x_refsource_confirm
https://jvn.jp/en/jp/JVN40898764/995849/index.html

Scores

CVSS v3 5.9
EPSS 0.0093
EPSS Percentile 55.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-295
Status published
Products (3)
dmm/dmmfx_demo_trade < 1.5.0
dmm/dmmfx_trade < 1.5.0
dmm/gaitamejapan_fx_trade < 1.4.0
Published Apr 20, 2017
Tracked Since Feb 18, 2026