CVE-2014-5940

The PocketPC.ch aka com.tapatalk.pocketpcch application 3.9.51 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5940

The PocketPC.ch aka com.tapatalk.pocketpcch application 3.9.51 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5940

The CVE-2014-5940 entry concerns the PocketPC.ch (com.tapatalk.pocketpcch) Android app v3.9.51 that does not verify X.509 certificates from SSL servers. This underlying flaw enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate....