CVE-2014-4906

The Brisbane & Queensland Alert aka com.queensland.alert application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4906

The CVE-2014-4906 entry concerns the Brisbane & Queensland Alert (com.queensland.alert) Android app 2.0, which does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause: lac...