EUVD-2014-6699

Malware in sbrugna...

Information disclosure

The voetbal aka nl.jborsje.android.voetbal.az application 4.7.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6821

The CVE-2014-6821 entry concerns the Android app voetbal (nl.jborsje.android.voetbal.az) version 4.7.2, where X.509 certificates are not validated by SSL servers. This root cause enables MITM attackers to spoof servers and potentially access sensitive information via a crafted certificate. Docume...