4 matches found
CVE-2014-6701
The Vendormate Mobile aka com.vendormate.mobile application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Vendormate Mobile aka com.vendormate.mobile application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6701
The CVE-2014-6701 entry concerns the Vendormate Mobile Android app (com.vendormate.mobile) version 3.0. The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling potential man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra...
CVE-2014-6701
The Vendormate Mobile aka com.vendormate.mobile application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...