PT-2014-7567

Name of the Vulnerable Software and Affected Versions Vodafone Avantaj Cepte application version 1.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from...

CVE-2014-6891: Undefined Security Weakness

The Vodafone Avantaj Cepte aka com.vodafone.avantajcepte.main application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...