CVE-2014-7124

The IP Alarm aka com.cosesy.gadget.alarm application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7124

CVE-2014-7124 affects the Android app IP Alarm (com.cosesy.gadget.alarm) version 1.4. The vulnerability stems from the app not verifying X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof the server and access sensitive information via a crafted certi...