CVE-2014-7000

The CVE-2014-7000 entry applies to The Paul Alexander Campaign (aka hr.apps.n51261427) Android app 4.5.8, where the app does not verify X.509 certificates from SSL servers. This basic trust-bypass enables man-in-the-middle attackers to spoof servers and harvest sensitive information via a crafted...

PT-2014-7676

Name of the Vulnerable Software and Affected Versions The Paul Alexander Campaign aka hr.apps.n51261427 application version 4.5.8 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information...