Information disclosure

The Pescuit Crap Lite aka ro.aventurilapescui.pescuitcrap.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6722

The CVE-2014-6722 entry affects the Android app “Pescuit Crap Lite” (ro.aventurilapescui.pescuitcrap.lite), version 1.0. The vulnerability stems from the app not verifying X.509 certificates when establishing SSL connections, which allows a man-in-the-middle to spoof servers and obtain sensitive ...

CVE-2014-6722

The Pescuit Crap Lite aka ro.aventurilapescui.pescuitcrap.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...