Design/Logic Flaw

The Runtastic Timer aka com.runtastic.android.timer application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Runtastic Heart Rate aka com.runtastic.android.heartrate.lite application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5690

CVE-2014-5690 affects the Runtastic Timer Android app (version 1.0.1). The root cause is a failure to validate X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected documents do not prov...

CVE-2014-5685

The Runtastic Heart Rate aka com.runtastic.android.heartrate.lite application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5687

The CVE-2014-5687 entry affects the Runtastic Mountain Bike Android app (2.0.1) and is due to the app not verifying X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The issue is documented across multiple sou...

CVE-2014-5690

The Runtastic Timer aka com.runtastic.android.timer application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5689

The Runtastic Road Bike aka com.runtastic.android.roadbike.lite application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5686

The Runtastic Me aka com.runtastic.android.me.lite application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5686

CVE-2014-5686 affects the Runtastic Me Android app (com.runtastic.android.me.lite) version 1.0.2; it does not verify X.509 certificates from SSL servers, enabling potential MITM with crafted certificates. The NVD entry lists a CVSSv2 base score of 5.4 (Medium) with partial impact to confidentiali...

CVE-2014-5684

The CVE-2014-5684 entry concerns the Runtastic Running & Fitness Android app (com.runtastic.android) version 5.1.2, which does not verify X.509 certificates when establishing SSL connections. This behavior enables man-in-the-middle attackers to spoof servers and obtain sensitive data via a crafte...

CVE-2014-5689

The CVE-2014-5689 entry pertains to the Runtastic Road Bike Android app (com.runtastic.android.roadbike.lite) version 2.0.1, where the app does not verify X.509 certificates from SSL servers. This certificate validation bypass allows MITM attackers to spoof servers and potentially exfiltrate sens...

CVE-2014-5685

CVE-2014-5685 concerns the Android app Runtastic Heart Rate (com.runtastic.android.heartrate.lite), version 1.3, which does not verify X.509 certificates from SSL servers. This approval gap allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certific...

CVE-2014-5687

The Runtastic Mountain Bike aka com.runtastic.android.mountainbike.lite application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5688

The Runtastic Pedometer aka com.runtastic.android.pedometer.lite application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5688

The CVE-2014-5688 entry concerns the Runtastic Pedometer (com.runtastic.android.pedometer.lite) Android app, version 1.5. The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive...