CVE:CVE-2020-5523
CNNVD:CNNVD-202001-1240
Mypallete是Mypallete个人开发者的一款用于绘图的移动应用。
基于Android平台的MyPallete（和一些基于MyPallete的银行应用程序）中存在信任管理问题漏洞，该漏洞源于程序没有正确验证X.509证书。攻击者可借助特制的证书利用该漏洞冒充服务器，获取敏感信息。
solution:Upgrade 77bank 77_bank to a higher version than 2.0.1,and avoid the version (,2.0.1]; Upgrade ashikagabank ashigin to a higher version than 1.0.4,and avoid the version (,1.0.4]; Upgrade hokkaidobank dogin to a higher version than 3.0.1,and avoid the version (,3.0.1]; Upgrade hokugin hokuriku_bank_portal to a higher version than 2.0.1,and avoid the version (,2.0.1]; Upgrade naganobank nagagin to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade nttdata mypallete to a higher version than -; Upgrade shikokubank shikoku_bank to a higher version than 2.0.1,and avoid the version (,2.0.1]; Upgrade sihd-bk ikeda_senshu_bank to a higher version than 3.0.4,and avoid the version (,3.0.4]; Upgrade tohoku-bank tougin to a higher version than 1.0.1,and avoid the version (,1.0.1]