← Back

Labanquepostale

labanquepostale

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Labanquepostale
labanquepostale
1 CVE
Acces Compte
acces_compte
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-5839
1Labanquepostale
1Acces Compte
May 6, 2026
Sep 9, 2014
N/A· v4
N/A· v3
5.4 MEDIUM· v2
The Acces Compte (aka com.fullsix.android.labanquepostale.accountaccess) application 3.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and ob...Show more
The Acces Compte (aka com.fullsix.android.labanquepostale.accountaccess) application 3.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.Show less
CVE-2014-5076
1Labanquepostale
1Labanquepostale
May 6, 2026
Sep 2, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via cr...Show more
The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework.Show less