CVE-2014-7798

CVE-2014-7798 affects the Coca-Cola FM Brasil Android app (com.enyetech.radio.coca_cola.fm_br, version 2.0.41709). The issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling potential MitM attackers to spoof servers and access sensitive information via a...

CVE-2014-7638

The CVE-2014-7638 entry concerns the Fabuestereo 88.1 FM Android app (package com.nobexinc.wls_27892411.rc), version 3.2.3. The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensiti...

CVE-2014-7667

The Coca-Cola FM Honduras aka com.enyetech.radio.cocacola.fmhn application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7798

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7667

The Coca-Cola FM Honduras Android app (com.enyetech.radio.coca_cola.fm_hn) version 2.0.41725 does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The provided documents do not specify...

CVE-2014-7638: Undefined Security Weakness

The Fabuestereo 88.1 FM aka com.nobexinc.wls27892411.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7798: Undefined Security Weakness

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7667: Undefined Security Weakness

The Coca-Cola FM Honduras aka com.enyetech.radio.cocacola.fmhn application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7484

The Coca-Cola FM Guatemala aka com.enyetech.radio.cocacola.fmgu application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Guatemala aka com.enyetech.radio.cocacola.fmgu application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Nova 92.1 FM aka com.wNova921FM application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7484

The Coca-Cola FM Guatemala aka com.enyetech.radio.cocacola.fmgu application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7520

The Nova 92.1 FM aka com.wNova921FM application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7484

CVE-2014-7484 affects the Coca-Cola FM Guatemala Android app (com.enyetech.radio.coca_cola.fm_gu) version 2.0.41725. The vulnerability is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificat...

CVE-2014-7520: Undefined Security Weakness

The Nova 92.1 FM aka com.wNova921FM application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7484: Undefined Security Weakness

The Coca-Cola FM Guatemala aka com.enyetech.radio.cocacola.fmgu application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6909

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6909

CVE-2014-6909 affects the Coca-Cola FM Peru Android app (com.enyetech.radio.coca_cola.fm_pe) version 2.0.41716, which does not verify X.509 certificates from SSL servers. This allows Man‑in‑the‑Middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The base ...

CVE-2014-6909

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...