2 matches found
Information disclosure
The PRIX IMPORT aka com.myapphone.android.myapppriximport application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
CVE-2014-7530
CVE-2014-7530 : The PRIX IMPORT app (com.myapphone.android.myapppriximport) for Android, version 1.0, does not verify X.509 certificates from SSL servers. This flaw enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Documentation does ...
5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
20