Search...

CVE-2014-5861

2014-09-10T06:55:08

ID CVE-2014-5861
Type cve
Reporter NVD
Modified 2014-09-21T19:30:36

Description

The BoyAhoy - Gay Chat (aka com.boyahoy.android) application 4.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

JSON Vulners Source

Initial Source

{"reporter": "NVD", "enchantments": {"score": {"vector": "NONE", "value": 5.0}, "vulnersScore": 5.0}, "published": "2014-09-10T06:55:08", "cvelist": ["CVE-2014-5861"], "title": "CVE-2014-5861", "objectVersion": "1.2", "type": "cve", "hash": "eda764655f883d6f19d92392227eb158003bf6203569a906a27f9da1e024d549", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5861", "bulletinFamily": "NVD", "id": "CVE-2014-5861", "history": [], "scanner": [], "cvss": {"score": 5.4, "vector": "AV:ADJACENT_NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "modified": "2014-09-21T19:30:36", "viewCount": 0, "cpe": ["cpe:/a:skout:boyahoy_-_gay_chat:4.3.6::~~~android~~"], "edition": 1, "description": "The BoyAhoy - Gay Chat (aka com.boyahoy.android) application 4.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.", "references": ["https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing", "http://www.kb.cert.org/vuls/id/582497"], "lastseen": "2016-09-03T20:57:02", "assessment": {"system": "", "name": "", "href": ""}}