Information disclosure

The George Wassouf aka com.devkhr32.georgewassouf application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7046

The CVE-2014-7046 entry concerns the Android app George Wassouf (com.devkhr32.georgewassouf) v1.0, which does not verify X.509 certificates from SSL servers. This flaw enables man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. No further explo...

CVE-2014-7046

The George Wassouf aka com.devkhr32.georgewassouf application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...