CVE-2014-7354

The CVE-2014-7354 entry affects the Penumbra eMag (com.magzter.penumbraemag) Android app (version 3.0). The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling potential MITM attackers to spoof servers and obtain sensitive information via a crafted certific...

CVE-2014-7354

The Penumbra eMag aka com.magzter.penumbraemag application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...