EUVD-2014-6606

Malware in sbrugna...

CVE-2014-6728

The ThinkPal aka com.mythinkpalapp application 1.6.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The ThinkPal aka com.mythinkpalapp application 1.6.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6728

The ThinkPal aka com.mythinkpalapp application 1.6.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6728

The CVE-2014-6728 entry concerns the ThinkPal Android app (com.mythinkpalapp), version 1.6.3, which does not verify X.509 certificates when establishing SSL connections. Root cause: missing server certificate validation, enabling MITM attackers to spoof servers and read sensitive data via crafted...