4 matches found
Information disclosure
The City Star ME aka com.citystarme application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7053
The CVE-2014-7053 entry concerns the City Star ME Android app (com.citystarme) version 1.0, where SSL certificate validation is missing. Specifically, the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and retrieve sensitive data via...
CVE-2014-7053
The City Star ME aka com.citystarme application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7053: Undefined Security Weakness
The City Star ME aka com.citystarme application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...