EUVD-2014-5619

Malware in sbrugna...

Wamba - meet women and men - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wamba - meet women and men published at the 'play' market has multiple vulnerabilities...

CVE-2014-5732

The Wamba - meet women and men aka com.wamba.client application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Wamba - meet women and men aka com.wamba.client application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5732

The Wamba - meet women and men aka com.wamba.client application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5732

The CVE-2014-5732 issue affects the Android app known as Wamba (com.wamba.client) version 3, where X.509 certificate validation is not performed by SSL servers. This missing certificate validation constitutes a trust flaw in the app’s TLS handling and can allow man-in-the-middle attackers to spoo...