EUVD-2014-5908

Malware in sbrugna...

CVE-2014-6020

The Fuel Rewards Network aka com.excentus.frn application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Fuel Rewards Network aka com.excentus.frn application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6020

The CVE-2014-6020 entry describes a vulnerability in the Fuel Rewards Network Android app (com.excentus.frn) where SSL/TLS servers’ X.509 certificates are not verified, enabling MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. According to the NVD entry, th...

PT-2014-7005

Name of the Vulnerable Software and Affected Versions Fuel Rewards Network aka com.excentus.frn application 1 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-6020: Undefined Security Weakness

The Fuel Rewards Network aka com.excentus.frn application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...