EUVD-2014-5801

Malware in sbrugna...

QNB Finansbank Cep Şubesi - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application QNB Finansbank Cep Şubesi published at the 'play' market has multiple vulnerabilities...

CVE-2014-5914

The Finansbank Cep Subesi aka com.finansbank.mobile.cepsube application 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5914

CVE-2014-5914 affects the Finansbank Cep Subesi Android app (com.finansbank.mobile.cepsube) version 1.1.5. The root cause is failure to verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD notes a ...

CVE-2014-5914

The Finansbank Cep Subesi aka com.finansbank.mobile.cepsube application 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...