EUVD-2014-5882

Malware in sbrugna...

CVE-2014-5995

The eWUS mobile aka pl.dreryk.ewustest application 1.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The eWUS mobile aka pl.dreryk.ewustest application 1.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5995

CVE-2014-5995 affects the Android app “eWUS mobile” (aka pl.dreryk.ewustest), version 1.4.5. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Exploi...

CVE-2014-5995

The eWUS mobile aka pl.dreryk.ewustest application 1.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6980

Name of the Vulnerable Software and Affected Versions eWUS mobile application version 1.4.5 Description The issue concerns the eWUS mobile application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information...

CVE-2014-5995: Undefined Security Weakness

The eWUS mobile aka pl.dreryk.ewustest application 1.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...