Lucene search
+L

5 matches found

NVD
NVD
•added 2014/10/21 10:55 a.m.•21 views

CVE-2014-4885

The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2014/10/21 10:00 a.m.•38 views

CVE-2014-4885

The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.8AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
•added 2014/10/21 10:00 a.m.•45 views

CVE-2014-4885

The CVE-2014-4885 entry concerns the CPWORLD Close Protection World Android app (com.tapatalk.closeprotectionworldcom) version 3.4.4. It is vulnerable because the app does not verify X.509 SSL certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive information via...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/10/21 12:00 a.m.•4 views

PT-2014-6189

Name of the Vulnerable Software and Affected Versions CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom version 3.4.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does...

5.4CVSS0.00266EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/21 12:00 a.m.•7 views

CVE-2014-4885: Undefined Security Weakness

The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Rows per page
Query Builder