EUVD-2014-5893

Malware in sbrugna...

CVE-2014-6005

The Survey.com Mobile aka com.survey.android application 3.2.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Survey.com Mobile aka com.survey.android application 3.2.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6005

The CVE-2014-6005 entry affects the Survey.com Mobile app (com.survey.android) for Android, version 3.2.16, which does not verify X.509 certificates from SSL servers, enabling MITM attacks with crafted certificates. CVSSv2 base score is 5.4 (Medium) with adjacent network attack vector, no authent...

CVE-2014-6005

The Survey.com Mobile aka com.survey.android application 3.2.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6990

Name of the Vulnerable Software and Affected Versions The Survey.com Mobile aka com.survey.android application version 3.2.16 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

CVE-2014-6005: Undefined Security Weakness

The Survey.com Mobile aka com.survey.android application 3.2.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...