The CyberAgent Ameba Android app 3.x and 4.x before 4.5.0 does not verify SSL certificates, enabling man-in-the-middle attacks
Reporter | Title | Published | Views | Family All 5 |
---|---|---|---|---|
![]() | Information disclosure | 15 Aug 201411:15 | – | prion |
![]() | CVE-2014-3902 | 15 Aug 201411:15 | – | cve |
![]() | CVE-2014-3902 | 15 Aug 201411:15 | – | nvd |
![]() | JVN#27702217: Ameba for Android contains an issue where it fails to verify SSL server certificates | 14 Aug 201400:00 | – | jvn |
![]() | CVE-2014-3902 | 15 Aug 201410:00 | – | cvelist |
OS | OS Version | Architecture | Package | Package Version | Filename |
---|---|---|---|---|---|
Alpine | 3.17-community | noarch | ameba | 1.3.1-r0 | UNKNOWN |
Alpine | 3.18-community | noarch | ameba | 1.4.3-r3 | UNKNOWN |
Alpine | 3.19-community | noarch | ameba | 1.5.0-r1 | UNKNOWN |
Alpine | 3.20-community | noarch | ameba | 1.6.1-r0 | UNKNOWN |
Alpine | edge-community | noarch | ameba | 1.6.3-r0 | UNKNOWN |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo