Information disclosure

The Ayuntamiento de Coana aka com.wInfoCoa application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7135

The CVE concerns the Android app Ayuntamiento de Coana (com.wInfoCoa) version 0.2. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information through a crafted certificate. This is t...

PT-2014-7796

Name of the Vulnerable Software and Affected Versions com.wInfoCoa version 0.2 Description The issue concerns the Ayuntamiento de Coana application, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information...