CVE-2014-7107

The CVE-2014-7107 entry concerns The Human Factor (com.magzter.thehumanfactor) Android app version 3.01, which fails to verify X.509 certificates from SSL servers. Root cause: missing certificate validation in the app’s SSL/TLS handling. Impact: potential MITM where an attacker could spoof the se...

PT-2014-7774

Name of the Vulnerable Software and Affected Versions com.magzter.thehumanfactor version 3.01 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

CVE-2014-7107: Undefined Security Weakness

The Human Factor aka com.magzter.thehumanfactor application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...