CVE-2005-2779: The iTAN Online-Banking Security System allows remote attackers to obtain TAN numbers via a man-in-the-midd...

Security readout for executives and security teams

This CVE describes a weakness in the iTAN online banking security model where an attacker positioned between the user and bank could capture transaction authorization numbers during a live transaction. The business risk is financial fraud exposure in systems still using this legacy transaction method. Exposure appears limited to online banking environments that used or still use the iTAN security system. The CVE source lists affected vendor, product, and versions as n/a, so asset owners must verify locally. Treat this as a legacy financial authentication risk. It is urgent only if the organization still depends on iTAN-style transaction authorization; otherwise track as historical awareness. Mitigation focus: Check bank or vendor guidance for iTAN replacement and compensating controls.; Inventory any remaining iTAN-based authentication or transaction approval flows.; Prefer vendor-approved transaction authorization methods resistant to phishing and MITM risk..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.