NW ePaper für Bielefeld & OWL - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application NW ePaper für Bielefeld & OWL published at the 'play' market has multiple vulnerabilities...

CVE-2014-6776

The CVE-2014-6776 entry covers the Android app United Advantage NW Federal Cr (com.myappengine.uanwfcu) version 1.7, where the client fails to verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via craf...

CVE-2014-6776: Undefined Security Weakness

The United Advantage NW Federal Cr aka com.myappengine.uanwfcu application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...