EUVD-2014-6686

Malware in sbrugna...

CVE-2014-6808

The Active 24 aka com.zentity.app.active24 application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Active 24 aka com.zentity.app.active24 application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6808

The Active 24 aka com.zentity.app.active24 application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6808

The CVE-2014-6808 entry concerns the Active 24 Android app (com.zentity.app.active24) version 1.0.1, where SSL/TLS certificate validation is not performed. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. The connected...

CVE-2014-6808: Undefined Security Weakness

The Active 24 aka com.zentity.app.active24 application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7486

Name of the Vulnerable Software and Affected Versions Active 24 aka com.zentity.app.active24 version 1.0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificate...