CVE-2014-7759

The Jazz Lovers Radio aka com.nobexinc.wls99273254.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jazz Lovers Radio aka com.nobexinc.wls99273254.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7759

The CVE-2014-7759 entry concerns the Jazz Lovers Radio Android app (com.nobexinc.wls_99273254.rc), version 3.2.3, which does not verify SSL/X.509 certificates when connecting to TLS servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted c...