EUVD-2014-5572

Malware in sbrugna...

CVE-2014-5685

The Runtastic Heart Rate aka com.runtastic.android.heartrate.lite application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Runtastic Heart Rate aka com.runtastic.android.heartrate.lite application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5685

CVE-2014-5685 concerns the Android app Runtastic Heart Rate (com.runtastic.android.heartrate.lite), version 1.3, which does not verify X.509 certificates from SSL servers. This approval gap allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certific...

CVE-2014-5685

The Runtastic Heart Rate aka com.runtastic.android.heartrate.lite application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6670

Name of the Vulnerable Software and Affected Versions Runtastic Heart Rate application version 1.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from S...

CVE-2014-5685: Undefined Security Weakness

The Runtastic Heart Rate aka com.runtastic.android.heartrate.lite application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...