EUVD-2017-6083

Malware in sbrugna...

Zoho Site24x7 Mobile Network Poller SSL Certificate Validation Security Bypass Vulnerability

Zoho Site24x7 is a full-service website monitoring network that can easily, quickly and efficiently monitor users' websites, web pages and web servers, and provide rich reports to ensure the normal operation of websites. A security bypass vulnerability exists in Zoho Site24x7 Mobile Network Polle...

CVE-2017-14582

The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate...

Design/Logic Flaw

The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate...

CVE-2017-14582

The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate...

CVE-2017-14582

Zoho Site24x7 Mobile Network Poller for Android (before 1.1.5) does not verify SSL X.509 certificates, enabling MITM via self-signed certs. Affected component: Android client; root cause: absent certificate verification. Impact: potential disclosure of sensitive information; exploitation details ...