Steganos Online Shield VPN - Customized SSL, GPL license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Steganos Online Shield VPN published at the 'play' market has multiple vulnerabilities...

CVE-2014-5928

The Steganos Online Shield VPN aka com.steganos.onlineshield application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Steganos Online Shield VPN aka com.steganos.onlineshield application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5928

The Steganos Online Shield VPN aka com.steganos.onlineshield application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5928

CVE-2014-5928 affects the Steganos Online Shield VPN Android app (com.steganos.onlineshield) version 1.0.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted c...

CVE-2014-5928: Undefined Security Weakness

The Steganos Online Shield VPN aka com.steganos.onlineshield application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Steganos Encrypted Safe NOT so safe

Sometimes greed can be the downfall of the greatest people and nations but in this case it's software. Steganos Encrypted File safe for Windows is one of the most commonly used file security systems in the world. They boast how excellent their encryption and how uncrackable they are. This is...