Fabasoft Cloud Website Cross Site Scripting

Bulletin was redacted based on a request by the author...

CVE-2014-7560

The Fabasoft Cloud aka com.fabasoft.android.cmis.foliocloud application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Fabasoft Cloud aka com.fabasoft.android.cmis.foliocloud application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7560

The Fabasoft Cloud aka com.fabasoft.android.cmis.foliocloud application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7560

CVE-2014-7560 affects the Fabasoft Cloud Android client (package com.fabasoft.android.cmis.folio_cloud), version 3.0.1. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and disclose sensitive inform...