EUVD-2014-7249

Malware in sbrugna...

CVE-2014-7378

The Jobranco aka com.jobranco application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jobranco aka com.jobranco application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7378

The CVE-2014-7378 entry concerns the Jobranco (com.jobranco) Android app v1.1, which does not verify X.509 SSL certificates. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability affects the app’s SSL certificate validation logic...

PT-2014-7947

Name of the Vulnerable Software and Affected Versions Jobranco application version 1.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7378: Undefined Security Weakness

The Jobranco aka com.jobranco application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...