4 matches found
CVE-2014-7717
The Mills-Hazel Property Mgmt aka com.appexpress.millshazelpropertymanagement application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Mills-Hazel Property Mgmt aka com.appexpress.millshazelpropertymanagement application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7717
The CVE-2014-7717 entry concerns the Mills-Hazel Property Mgmt Android app (3.0.0) failing to verify X.509 certificates when communicating with SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive data via a crafted certificate. The provided documents confirm th...
CVE-2014-7717: Undefined Security Weakness
The Mills-Hazel Property Mgmt aka com.appexpress.millshazelpropertymanagement application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...