5 matches found
CVE-2014-6739
The Well-Being Connect Mobile aka com.healthways.wellbeinggo application 2.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6739
The Well-Being Connect Mobile aka com.healthways.wellbeinggo application 2.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6739
CVE-2014-6739 relates to the Android app Well-Being Connect Mobile (com.healthways.wellbeinggo) 2.9, where the app does not verify X.509 certificates from SSL servers. This creates a man‑in‑the‑middle risk, allowing an attacker to spoof servers and obtain sensitive information via a crafted certi...
CVE-2014-6739: Undefined Security Weakness
The Well-Being Connect Mobile aka com.healthways.wellbeinggo application 2.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-7417
Name of the Vulnerable Software and Affected Versions Well-Being Connect Mobile application version 2.9 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from...