4 matches found
Information disclosure
The George Wassouf aka com.devkhr32.georgewassouf application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7046
The George Wassouf aka com.devkhr32.georgewassouf application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7046
The CVE-2014-7046 entry concerns the Android app George Wassouf (com.devkhr32.georgewassouf) v1.0, which does not verify X.509 certificates from SSL servers. This flaw enables man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. No further explo...
CVE-2014-7046: Undefined Security Weakness
The George Wassouf aka com.devkhr32.georgewassouf application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...