4 matches found
CVE-2014-7447
The Dattch - The Lesbian App aka com.dattch.dattch.app application 0.30 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Dattch - The Lesbian App aka com.dattch.dattch.app application 0.30 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7447
The Dattch - The Lesbian App aka com.dattch.dattch.app application 0.30 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7447
The CVE-2014-7447 entry concerns The Dattch – The Lesbian App (com.dattch.dattch.app) for Android, version 0.30, which does not verify X.509 certificates from SSL servers. The root cause is that SSL certificate verification is bypassed, enabling man-in-the-middle attackers to spoof servers and ob...