CVE-2014-5797

The smart aka nh.smart application 3.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The smart aka nh.smart application 3.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5797

The CVE-2014-5797 entry concerns the Android app nh.smart (smart) version 3.0.5, which fails to verify X.509 certificates when connecting to SSL servers. This allows a man-in-the-middle attacker to spoof the server and obtain sensitive information via a crafted certificate. The available document...