4 matches found
Information disclosure
The Ali Visual aka com.ali.visual application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7310
The CVE-2014-7310 entry concerns the Ali Visual app (com.ali.visual) for Android (version 1.0) where SSL/TLS connections do not verify X.509 certificates, enabling a man-in-the-middle to spoof servers and access sensitive data. The vulnerability affects the app’s TLS trust validation, with NVD no...
CVE-2014-7310
The Ali Visual aka com.ali.visual application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7310: Undefined Security Weakness
The Ali Visual aka com.ali.visual application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...