CVE:CVE-2016-4838
CNNVD:CNNVD-201609-545
Android Apps Money Forward和SOURCENEXT CORPORATION Money Forward for AppPass等都是资金管理软件。Android Apps Money Forward是日本Money Forward公司的基于Android系统的财富管理应用程序。SOURCENEXT CORPORATION Money Forward for AppPass是日本SOURCENEXT CORPORATION公司的财富管理应用程序。
多款Money Forward和SOURCENEXT CORPORATION产品中存在存在安全漏洞。攻击者可借助特制的应用程序利用该漏洞执行未授权的操作。以下产品和版本受到影响：Android Apps Money Forward 7.18.0之前的版本；Money Forward for The Gunma Bank 1.2.0之前的版本；Money Forward for SHIGA BANK 1.2.0之前的版本；Money Forward for SHIZUOKA BANK 1.4.0之前的版本；Money Forward for SBI Sumishin Net Bank 1.6.0之前的版本；Money Forward for Tokai Tokyo Securities 1.4.0之前的版本；Money Forward for THE TOHO BANK 1.3.0之前的版本；Money Forward for YMFG 1.5.0之前的版本；SOURCENEXT CORPORATION Money Forward for AppPass 7.18.3之前的版本；SOURCENEXT CORPORATION Money Forward for au SMARTPASS 7.18.0之前的版本；SOURCENEXT CORPORATION Money Forward for Chou Houdai 7.18.3之前的版本。
solution:Upgrade moneyforward money_forward_for_apppass to a higher version than 7.18.3,and avoid the version (,7.18.3); Upgrade moneyforward money_forward_for_au_smartpass to a higher version than 7.18.0,and avoid the version (,7.18.0); Upgrade moneyforward money_forward_for_chou_houdai to a higher version than 7.18.3,and avoid the version (,7.18.3); Upgrade moneyforward money_forward_for_sbi_sumishin_net_bank to a higher version than 1.6.0,and avoid the version (,1.6.0); Upgrade moneyforward money_forward_for_shiga_bank to a higher version than 1.2.0,and avoid the version (,1.2.0); Upgrade moneyforward money_forward_for_shizuoka_bank to a higher version than 1.4.0,and avoid the version (,1.4.0); Upgrade moneyforward money_forward_for_the_gunma_bank to a higher version than 1.2.0,and avoid the version (,1.2.0); Upgrade moneyforward money_forward_for_the_toho_bank to a higher version than 1.3.0,and avoid the version (,1.3.0); Upgrade moneyforward money_forward_for_tokai_tokyo_securities to a higher version than 1.4.0,and avoid the version (,1.4.0); Upgrade moneyforward money_forward_for_ymfg to a higher version than 1.5.0,and avoid the version (,1.5.0)