CVE-2016-4818

Published: Apr 20, 2017Modified: May 13, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

DMMFX Trade for Android 1.5.0 and earlier, DMMFX DEMO Trade for Android 1.5.0 and earlier, and GAITAMEJAPAN FX Trade for Android 1.4.0 and earlier do not verify SSL certificates.

Affected (3)

Products: Dmm: Dmmfx Demo Trade, Dmmfx Trade, Gaitamejapan Fx Trade

Dmm

3 products

Dmmfx Demo Trade

Dmmfx Trade

Gaitamejapan Fx Trade

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Dmm Dmmfx Demo Trade	Up to 1.5.0
Dmm Dmmfx Trade	Up to 1.5.0
Dmm Gaitamejapan Fx Trade	Up to 1.4.0

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (10)

http://fx.dmm.com/information/press/2016/2016053001/

Source: vultures@jpcert.or.jp

Vendor Advisory

http://jvn.jp/en/jp/JVN40898764/index.html

Source: vultures@jpcert.or.jp

Third Party AdvisoryVDB Entry

http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000092.html

Source: vultures@jpcert.or.jp

Third Party AdvisoryVDB Entry

http://www.gaitamejapan.com/support/news/2016/2016053001/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://jvn.jp/en/jp/JVN40898764/995849/index.html

Source: vultures@jpcert.or.jp

Third Party AdvisoryVDB Entry

http://fx.dmm.com/information/press/2016/2016053001/