CVE-2014-5987

The CVE-2014-5987 entry concerns the My3 app (com.my3) on Android, which does not verify X.509 certificates when establishing SSL connections. This behavior allows man-in-the-middle attackers to spoof SSL servers and exfiltrate sensitive information via a crafted certificate. The supplied documen...

PT-2014-6972

Name of the Vulnerable Software and Affected Versions The My3 - by 3HK aka com.my3 application version @7F0A0001 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-5987: Undefined Security Weakness

The My3 - by 3HK aka com.my3 application @7F0A0001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...