Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Labanquepostale Clear all filters
TI-2014-04790 CVE-2014-5839 · GHSA-7mg6-mwr2-vvpf

The Acces Compte (aka com.fullsix.android.labanquepostale.accountaccess) application…

Priority LOW 24

The Acces Compte (aka com.fullsix.android.labanquepostale.accountaccess) application 3.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and ob…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-09 No fix listed CWE-310
TI-2014-04153 CVE-2014-5076 · GHSA-58ch-2wmc-p338

The La Banque Postale application before 3.2.6 for Android does not prevent the launching…

Priority LOW 22

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via cr…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00996 Published 2014-09-02 No fix listed CWE-200