EUVD-2014-5446

Malware in sbrugna...

Information disclosure

The Kids GoldFish Care aka air.josiane.sauveterre.kidsgoldfishcare application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5559

The CVE-2014-5559 entry concerns The Kids GoldFish Care (Android app package air.josiane.sauveterre.kidsgoldfishcare, version 1.0.3). The affected component is the app’s SSL/TLS certificate verification, where it does not verify X.509 certificates when connecting to SSL servers. This weak configu...

PT-2014-6544

Name of the Vulnerable Software and Affected Versions The Kids GoldFish Care application version 1.0.3 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5559: Undefined Security Weakness

The Kids GoldFish Care aka air.josiane.sauveterre.kidsgoldfishcare application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...