CVE-2014-6829

The CVE-2014-6829 entry concerns the Android app The Hook (com.hook.android) version 0.9.3, which does not verify X.509 certificates from SSL servers. This certificate validation flaw allows man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted cer...

CVE-2014-6829: Undefined Security Weakness

The Hook aka com.hook.android application 0.9.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7506

Name of the Vulnerable Software and Affected Versions The Hook aka com.hook.android version 0.9.3 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...