Design/Logic Flaw

The kalahari.com Shopping aka com.kalahari.shop application 1.4.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6892

The CVE-2014-6892 entry concerns the kalahari.com Shopping Android app (com.kalahari.shop), version 1.4.2.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and potentially obtain sensitive data through c...