← Back

CVE-2020-5523

nvd nist
Published: Jan 28, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 2.2 / Impact: 5.2
Source: NVD

Description

Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-mismatch, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected (9)

Products: 77bank: 77 Bank · Ashikagabank: Ashigin · Hokkaidobank: Dogin · +6 more
Show all products
77bank: 77 Bank · Ashikagabank: Ashigin · Hokkaidobank: Dogin · Hokugin: Hokuriku Bank Portal · Naganobank: Nagagin · Nttdata: Mypallete · Shikokubank: Shikoku Bank · Sihd Bk: Ikeda Senshu Bank · Tohoku Bank: Tougin
77bank
1 product
77 Bank
Ashikagabank
1 product
Ashigin
Hokkaidobank
1 product
Dogin
Hokugin
1 product
Hokuriku Bank Portal
Naganobank
1 product
Nagagin
Nttdata
1 product
Mypallete
Shikokubank
1 product
Shikoku Bank
Sihd Bk
1 product
Ikeda Senshu Bank
Tohoku Bank
1 product
Tougin
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
77 Bank
Up to 2.0.1
Ashigin
Up to 1.0.4
Dogin
Up to 3.0.1
Hokuriku Bank Portal
Up to 2.0.1
Nagagin
Up to 1.0.1
Mypallete
All versions
Shikoku Bank
Up to 2.0.1
Ikeda Senshu Bank
Up to 3.0.4
Tougin
Up to 1.0.1

Related CWEs

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References (20)

Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.