CVE-2016-1210

Name of the Vulnerable Software and Affected Versions 105 BANK app version 1.0 and 1.1 for Android 105 BANK app version 1.0 for iOS

Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates from SSL servers.

Recommendations For version 1.0 and 1.1 on Android: Update the app to a version that properly verifies X.509 certificates from SSL servers. For version 1.0 on iOS: Update the app to a version that properly verifies X.509 certificates from SSL servers.