Information disclosure

The Lost Temple aka com.crazy.game.good.mengchenglu.templeI application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7611

The Lost Temple aka com.crazy.game.good.mengchenglu.templeI application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7611

The Lost Temple Android app (package com.crazy.game.good.mengchenglu.templeI) version 1.6 does not verify SSL server X.509 certificates, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause is disabled certificate validation; impact is pa...