CVE-2014-5635

The CVE-2014-5635 entry concerns the Android app Buy Yorkshire Conference (com.gotfocus.buyyorkshire) version 1.4, which fails to verify X.509 certificates from SSL servers. This creates a certificate validation bypass, allowing man-in-the-middle attackers to spoof legitimate servers and extract ...

PT-2014-6620

Name of the Vulnerable Software and Affected Versions com.gotfocus.buyyorkshire version 1.4 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...