EUVD-2014-5527

Malware in sbrugna...

CVE-2014-5640

The CM Backup -Restore,Cloud,Photo aka com.ijinshan.kbackup application 1.1.0.135 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The CM Backup -Restore,Cloud,Photo aka com.ijinshan.kbackup application 1.1.0.135 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5640

The CM Backup -Restore,Cloud,Photo aka com.ijinshan.kbackup application 1.1.0.135 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5640

The CVE-2014-5640 entry concerns the Android app CM Backup -Restore,Cloud,Photo (com.ijinshan.kbackup) version 1.1.0.135, which fails to verify X.509 certificates when connecting to SSL servers. This allows MITM attackers to spoof servers and access sensitive information via a crafted certificate...