Information disclosure

The Ali Visual aka com.ali.visual application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7310

The CVE-2014-7310 entry concerns the Ali Visual app (com.ali.visual) for Android (version 1.0) where SSL/TLS connections do not verify X.509 certificates, enabling a man-in-the-middle to spoof servers and access sensitive data. The vulnerability affects the app’s TLS trust validation, with NVD no...

CVE-2014-7310

The Ali Visual aka com.ali.visual application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...