CVE-2014-6666

The Baglamukhi aka com.wshribaglamukhiblog application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6666

The Baglamukhi aka com.wshribaglamukhiblog application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6666

The CVE-2014-6666 entry concerns the Baglamukhi app (Android, version 0.1) that does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation enables man‑in‑the‑middle attackers to spoof servers and potentially obtain sensitive information via crafted certificate...