3 matches found
CVE-2014-7369
The CVE-2014-7369 entry concerns the Android app Il Brillo Parlante (com.wIlBrilloParlante) version 0.1, which fails to verify X.509 certificates when connecting to SSL servers. The root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and access sens...
PT-2014-7939
Name of the Vulnerable Software and Affected Versions com.wIlBrilloParlante version 0.1 Description The issue concerns the failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7369: Undefined Security Weakness
The Il Brillo Parlante aka com.wIlBrilloParlante application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...