CVE-2020-5523

Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not…

published January 28, 2020

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-mismatch, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01175 · 67.3th percentile
Published
2020-01-28T05:25Z
EPSS history
Timeline
  • 28 JAN 05:25Z
    Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not…
    cvelistv5