EUVD-2014-6945

Malware in sbrugna...

CVE-2014-7066

The LegalEra aka com.magzter.legalera application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The LegalEra aka com.magzter.legalera application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7066

The LegalEra aka com.magzter.legalera application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7066

CVE-2014-7066 affects the LegalEra (com.magzter.legalera) Android app version 3.0. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attacks to spoof servers and access sensitive information via a crafted certificate. The NVD entry list...

CVE-2014-7066: Undefined Security Weakness

The LegalEra aka com.magzter.legalera application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...