Description (CNA)
The mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Nihon Unisys, Ltd. / mobiGate App for Android | affected version 2.2.1.2 and earlier |
| Nihon Unisys, Ltd. / mobiGate App for iOS | affected version 2.2.4.1 and earlier |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.