CVE-2014-5963

The CVE-2014-5963 entry concerns the Halieutics Android app (com.corn.Halieutics), version 21.40.5, where X.509 certificate validation is not performed when connecting to SSL servers. This enables man‑in‑the‑middle attackers to spoof servers and exfiltrate sensitive information via a crafted cert...

PT-2014-6948

Name of the Vulnerable Software and Affected Versions com.corn.Halieutics version 21.40.5 Description The issue concerns a failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...