EUVD-2014-6754

Malware in sbrugna...

Information disclosure

The American Express Serve aka com.serve.mobile application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7552

Name of the Vulnerable Software and Affected Versions American Express Serve application version @7F0901E4 Description The issue concerns the American Express Serve application for Android, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof...

CVE-2014-6876: Undefined Security Weakness

The American Express Serve aka com.serve.mobile application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...