5 matches found
Design/Logic Flaw
The Bodyguard for Hire aka com.dreamstep.wBodyGuardforHire application 0.18.13146.42280 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7529
The Bodyguard for Hire aka com.dreamstep.wBodyGuardforHire application 0.18.13146.42280 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7529
The CVE-2014-7529 entry covers the Android app “Bodyguard for Hire” (com.dreamstep.wBodyGuardforHire) version 0.18.13146.42280. The issue is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and extract sensitive data via a crafted cer...
PT-2014-8069
Name of the Vulnerable Software and Affected Versions The Bodyguard for Hire aka com.dreamstep.wBodyGuardforHire version 0.18.13146.42280 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive...
CVE-2014-7529: Undefined Security Weakness
The Bodyguard for Hire aka com.dreamstep.wBodyGuardforHire application 0.18.13146.42280 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...