CVE-2014-5915

The Tigo Copa Mundial FIFA 2014 aka com.fwc2014.millicom.and application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Tigo Copa Mundial FIFA 2014 aka com.fwc2014.millicom.and application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5915

The CVE-2014-5915 entry concerns the Tigo Copa Mundial FIFA 2014 Android app (version 3.1, package com.fwc2014.millicom.and). The vulnerability is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive info...

CVE-2014-5915

The Tigo Copa Mundial FIFA 2014 aka com.fwc2014.millicom.and application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...