EUVD-2014-7417

Malware in sbrugna...

Information disclosure

The Buddhist Prayer aka com.buddhist.prayer.mantra.sutra application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7546

The Buddhist Prayer aka com.buddhist.prayer.mantra.sutra application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7546

The CVE-2014-7546 entry concerns the Android app The Buddhist Prayer (com.buddhist.prayer.mantra.sutra) version 3.0, which does not verify X.509 certificates when validating SSL connections. The root cause is missing certificate validation, allowing MITM attackers to spoof SSL servers and retriev...