TI-2018-11576 CVE-2018-16179 · GHSA-q3h8-vxrg-hgjpImproper certificate validation in Mizuho Direct App for AndroidPriority LOW 27The Mizuho Direct App for Android version 3.13.0 and earlier does not verify server certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00547 · Published 2019-01-09 · No fix listed CWE-295