CVE-2014-7089

CVE-2014-7089 concerns the Android app “COMPETITION INFORMATION (com.ear.bilgiyarismasi)” version 0.1, which does not verify X.509 certificates when establishing SSL connections. This missing certificate validation allows a man-in-the-middle to spoof HTTPS servers and exfiltrate or tamper with se...

CVE-2014-7089: Undefined Security Weakness

The COMPETITION INFORMATION aka com.ear.bilgiyarismasi application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7761

Name of the Vulnerable Software and Affected Versions COMPETITION INFORMATION aka com.ear.bilgiyarismasi application version 0.1 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information...