Information disclosure

The Everest Poker aka com.wEverestPoker application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7558

The CVE-2014-7558 entry concerns the Everest Poker Android app (package com.wEverestPoker) version 0.1. The vulnerability is failure to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The provided sou...