5 matches found
CVE-2014-6889
The GunBroker.com aka com.gunbroker.android application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The GunBroker.com aka com.gunbroker.android application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6889
The CVE-2014-6889 entry concerns the GunBroker.com Android app (com.gunbroker.android) version 1.1.2, where SSL/TLS connections do not verify X.509 certificates. This weak certificate validation enables man-in-the-middle attackers to spoof servers and potentially obtain sensitive information via ...
CVE-2014-6889
The GunBroker.com aka com.gunbroker.android application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6889: Undefined Security Weakness
The GunBroker.com aka com.gunbroker.android application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...