7 matches found
CVE-2014-7753
The Circa News aka cir.ca application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Circa News aka cir.ca application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7753
The Circa News aka cir.ca application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7753
The Circa News aka cir.ca application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7753
The CVE-2014-7753 entry concerns the Circa News Android app (2.1.3) failing to verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and access sensitive information via a crafted certificate. The connected documents corroborate this root cause (certificate val...
CVE-2014-7753: Undefined Security Weakness
The Circa News aka cir.ca application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-8238
Name of the Vulnerable Software and Affected Versions Circa News aka cir.ca application version 2.1.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SS...