CVE-2014-7076

The Sanctuary Asia aka com.magzter.sanctuaryasia application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Sanctuary Asia aka com.magzter.sanctuaryasia application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7076

The CVE-2014-7076 entry applies to the Sanctuary Asia Android app (3.0), where the component does not verify X.509 certificates from SSL servers. This vulnerability enables MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The accepted root cause is SSL trus...

CVE-2014-7076

The Sanctuary Asia aka com.magzter.sanctuaryasia application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7749

Name of the Vulnerable Software and Affected Versions The Sanctuary Asia aka com.magzter.sanctuaryasia version 3.0 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft...

CVE-2014-7076: Undefined Security Weakness

The Sanctuary Asia aka com.magzter.sanctuaryasia application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...