Information disclosure

The Campus Link - Campus TV HKUSU aka com.campus.tv.hkusu application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6783

The Campus Link - Campus TV HKUSU Android app (package com.campus.tv.hkusu, version 2.2) does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The CVSS notes partial impact to confide...

CVE-2014-6783

The Campus Link - Campus TV HKUSU aka com.campus.tv.hkusu application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...