EUVD-2014-5782

Malware in sbrugna...

CVE-2014-5895

The ShopYourWay aka com.sears.shopyourway application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The ShopYourWay aka com.sears.shopyourway application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5895

The CVE-2014-5895 entry applies to the ShopYourWay Android app (package com.sears.shopyourway) version 1.9. It documents a failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The c...

CVE-2014-5895

The ShopYourWay aka com.sears.shopyourway application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...