description: The Mizuho Direct App for Android version 3.13.0 and earlier does not verify server certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
problem types: Fails to verify SSL certificates
affected:
{
product: Mizuho Direct App for Android
vendor: Mizuho Bank, Ltd.
versions:
status: affected, version: version 3.13.0 and earlier
}