CVE-2014-7539

The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7539

CVE-2014-7539 affects the Android app “com.zizizzi” v1.0 (Zhang Zhijun Taiwan Visit). The issue is lack of X.509 certificate verification for SSL servers, allowing MITM attackers to spoof servers and exfiltrate sensitive data. The root cause is improper TLS validation in the app; no remediation o...

CVE-2014-7539

The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...