EUVD-2014-6563

Malware in sbrugna...

Information disclosure

The Tsushima Travel Guide aka com.netjapan.ntsushima application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6685

The Tsushima Travel Guide aka com.netjapan.ntsushima application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6685

CVE-2014-6685: Tsushima Travel Guide (Android app 1.9) does not verify X.509 certificates, enabling MITM attackers to spoof SSL servers and obtain sensitive data. Affected component is the app’s SSL certificate verification logic; root cause is lack of certificate validation. Exploitation details...

PT-2014-7363

Name of the Vulnerable Software and Affected Versions The Tsushima Travel Guide aka com.netjapan.ntsushima version 1.9 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

CVE-2014-6685: Undefined Security Weakness

The Tsushima Travel Guide aka com.netjapan.ntsushima application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...