Information disclosure

The TIO MobilePay - Bill Payments aka com.tionetworks.mobile.android.tioclient application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6639

The CVE-2014-6639 entry concerns the Android app TIO MobilePay – Bill Payments (com.tionetworks.mobile.android.tioclient) version 1.1.1, where SSL servers’ X.509 certificate verification is not performed. This lack of certificate validation allows man‑in‑the‑middle attackers to spoof servers and ...