EUVD-2014-7392

Malware in sbrugna...

CVE-2014-7521

The CVE-2014-7521 entry concerns the Android app Anderson Musaamil (com.app_andersonmusaamil.layout) version 1.400, where TLS/SSL X.509 certificate validation is not performed. Root cause: the app fails to verify server certificates, enabling a MITM to spoof servers and exfiltrate sensitive data ...

CVE-2014-7521: Undefined Security Weakness

The Anderson Musaamil aka com.appandersonmusaamil.layout application 1.400 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...