EUVD-2014-5641

Malware in sbrugna...

Design/Logic Flaw

The Verizon Instant Refills 24/7 aka com.wVerizonInstantRefill247 application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5754

CVE-2014-5754 concerns the Verizon Instant Refills 24/7 Android app (version 0.1) not verifying X.509 certificates from SSL servers, enabling man-in-the-middle attacks to spoof servers and access sensitive data via a crafted certificate. The connected NVD/NVD-derived records confirm the same desc...

CVE-2014-5754

The Verizon Instant Refills 24/7 aka com.wVerizonInstantRefill247 application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...