EUVD-2014-5889

Malware in sbrugna...

Information disclosure

The gewara aka com.gewara application 5.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6001

CVE-2014-6001 affects the Android gewara (com.gewara) app version 5.2.3, where the code does not verify X.509 certificates from SSL servers. This root cause allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The entry notes a moderate i...