EUVD-2014-5535

Malware in sbrugna...

JAUMO Flirt Chat - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application JAUMO Flirt Chat published at the 'play' market has multiple vulnerabilities...

CVE-2014-5648

The Chat, Flirt & Dating Heart JAUMO aka com.jaumo application 2.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Chat, Flirt & Dating Heart JAUMO aka com.jaumo application 2.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5648

The Chat, Flirt & Dating Heart JAUMO aka com.jaumo application 2.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5648

CVE-2014-5648 affects the Android app “Chat, Flirt & Dating Heart JAUMO” (com.jaumo) at version 2.7.5. The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, which enables a man-in-the-middle attacker to spoof servers and exfiltrate sensitive data via...

PT-2014-6633

Name of the Vulnerable Software and Affected Versions Jaumo application version 2.7.5 Description The issue concerns the Jaumo application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft...

CVE-2014-5648: Undefined Security Weakness

The Chat, Flirt & Dating Heart JAUMO aka com.jaumo application 2.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...