SSL Certificate Verification Bypass in WAON Service Application for Android
CVE-2016-4832

5.9MEDIUM

Key Information:

Vendor

Aeon

Status
Waon
Vendor
CVE Published:
21 April 2017

What is CVE-2016-4832?

The WAON Service Application for Android versions 1.4.1 and earlier contains a vulnerability that allows attackers to bypass SSL certificate verification. This flaw can enable a malicious actor to intercept and manipulate the traffic between the application and the server, potentially exposing sensitive user data. The absence of proper SSL certificate validation creates a significant risk for users who rely on this application for transactions and sensitive activities.

References

http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000124.html
third-party-advisoryx_refsource_JVNDB
http://www.securityfocus.com/bid/91789
vdb-entryx_refsource_BID
http://jvn.jp/en/jp/JVN68364327/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.