Design/Logic Flaw

The kalahari.com Shopping aka com.kalahari.shop application 1.4.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6892

The CVE-2014-6892 entry concerns the kalahari.com Shopping Android app (com.kalahari.shop), version 1.4.2.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and potentially obtain sensitive data through c...

PT-2014-7568

Name of the Vulnerable Software and Affected Versions kalahari.com Shopping application version 1.4.2.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from...

CVE-2014-6892: Undefined Security Weakness

The kalahari.com Shopping aka com.kalahari.shop application 1.4.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...