CVE-2014-5603

The DeskRoll Remote Desktop aka com.deskroll.client1 application 0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The DeskRoll Remote Desktop aka com.deskroll.client1 application 0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5603

The DeskRoll Remote Desktop app (com.deskroll.client1) for Android, version 0.6, is affected. It does not verify X.509 certificates when establishing SSL connections, enabling potential man-in-the-middle attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The avail...

PT-2014-6588

Name of the Vulnerable Software and Affected Versions DeskRoll Remote Desktop version 0.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL server...

CVE-2014-5603: Undefined Security Weakness

The DeskRoll Remote Desktop aka com.deskroll.client1 application 0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...