CVE-2014-5323

CVE-2014-5323 affects the Yuko Yuko App for Android (jp.co.yukoyuko.android.yukoyuko_android), version 1.0.5 and earlier. The root cause is that the app does not verify X.509 certificates when establishing SSL connections, enabling potential MITM attackers to spoof servers and access sensitive in...

CVE-2014-5323

The Yuko Yuko aka jp.co.yukoyuko.android.yukoyukoandroid application 1.0.5 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...