Information disclosure

The Joe's Lawn Service aka com.appexpress.joeslawnservice application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7384

The CVE-2014-7384 entry applies to the Android application Joe’s Lawn Service (com.appexpress.joeslawnservice) version 1.5. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information via a cr...

CVE-2014-7384

The Joe's Lawn Service aka com.appexpress.joeslawnservice application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7951

Name of the Vulnerable Software and Affected Versions Joe's Lawn Service aka com.appexpress.joeslawnservice version 1.5 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

CVE-2014-7384: Undefined Security Weakness

The Joe's Lawn Service aka com.appexpress.joeslawnservice application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...