What is CVE-2016-7812?

CVE-2016-7812 is a low-severity vulnerability in Mufg Mitsubishi Ufj, classified under Cryptographic Issues. CVSS score: 3.1/10. Published 2017-08-02.

How severe is CVE-2016-7812?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in Mufg Mitsubishi Ufj

CVE-2016-7812

The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.008 (53.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Mufg Mitsubishi_ufj — versions 5.3.1
The Bank Of Tokyo-mitsubishi Ufj, Ltd. App For Android — versions ver5.2.2 and earlier, ver5.3.1

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, x_refsource_MISC)
vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2016-7812?: CVE-2016-7812 is a low-severity vulnerability in Mufg Mitsubishi Ufj, classified under Cryptographic Issues. CVSS score: 3.1/10. Published 2017-08-02.
How severe is CVE-2016-7812?: Low severity. CVSS v3 base score is 3.1 out of 10.