Information disclosure

The Ali Visual aka com.ali.visual application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7310

The Ali Visual aka com.ali.visual application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7310

The CVE-2014-7310 entry concerns the Ali Visual app (com.ali.visual) for Android (version 1.0) where SSL/TLS connections do not verify X.509 certificates, enabling a man-in-the-middle to spoof servers and access sensitive data. The vulnerability affects the app’s TLS trust validation, with NVD no...

PT-2014-7895

Name of the Vulnerable Software and Affected Versions Ali Visual aka com.ali.visual version 1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

CVE-2014-7310: Undefined Security Weakness

The Ali Visual aka com.ali.visual application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...