3 matches found
Information disclosure
The feiron aka es.sw.feironmobile.app application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6963
The CVE-2014-6963 entry concerns the feiron (aka es.sw.feironmobile.app) Android application, version 1.1. The root cause is that the app does not verify X.509 certificates from SSL servers, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted ...
CVE-2014-6963
The feiron aka es.sw.feironmobile.app application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...