EUVD-2014-7674

Malware in sbrugna...

CVE-2014-7803

The Woodward Bail aka com.onesolutionapps.woodwardbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Woodward Bail aka com.onesolutionapps.woodwardbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7803

The Woodward Bail aka com.onesolutionapps.woodwardbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7803

CVE-2014-7803 affects the Android app Woodward Bail (com.onesolutionapps.woodwardbailandroid), version 1.1, where TLS X.509 certificate validation is not performed. This enables MITM attackers to spoof SSL servers and exfiltrate sensitive data via a crafted certificate (base CVSS v2 score 5.4).

PT-2014-8285

Name of the Vulnerable Software and Affected Versions com.onesolutionapps.woodwardbailandroid version 1.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates...

CVE-2014-7803: Undefined Security Weakness

The Woodward Bail aka com.onesolutionapps.woodwardbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...