CVE-2014-6015

The TuCarro aka com.tucarro application 2.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The TuCarro aka com.tucarro application 2.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6015

The CVE-2014-6015 entry concerns the TuCarro (com.tucarro) Android app v2.0.5 that does not verify X.509 certificates from SSL servers. This causes potential MITM where an attacker can spoof servers and extract sensitive data via a crafted certificate. Documents confirm the affected software and ...

CVE-2014-6015

The TuCarro aka com.tucarro application 2.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...