EUVD-2014-6781

Malware in sbrugna...

CVE-2014-6903

The Gulf Power Mobile Bill Pay aka com.tionetworks.gulf application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Gulf Power Mobile Bill Pay aka com.tionetworks.gulf application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6903

The Gulf Power Mobile Bill Pay aka com.tionetworks.gulf application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6903

The CVE-2014-6903 entry corresponds to the Gulf Power Mobile Bill Pay Android app (com.tionetworks.gulf) failing to verify X.509 certificates from SSL servers. This disables proper TLS certificate validation, enabling man-in-the-middle attackers to spoof servers and capture sensitive data via a c...