CVE-2014-4885

The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Epc World aka com.magzter.epcworld application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7778

The Epc World aka com.magzter.epcworld application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7771

The World Tamil Bayan aka com.wWorldTamilBayan application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The World Tamil Bayan aka com.wWorldTamilBayan application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4885

The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4885

The CVE-2014-4885 entry concerns the CPWORLD Close Protection World Android app (com.tapatalk.closeprotectionworldcom) version 3.4.4. It is vulnerable because the app does not verify X.509 SSL certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive information via...

CVE-2014-7771

The World Tamil Bayan aka com.wWorldTamilBayan application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7778

The Epc World aka com.magzter.epcworld application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7778

The CVE-2014-7778 entry affects the Android app “Epc World” (package com.magzter.epcworld) version 3.1. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certific...

CVE-2014-7771

CVE-2014-7771 affects the World Tamil Bayan Android app (package com.wWorldTamilBayan) version 0.1, which does not verify X.509 certificates from SSL servers. This causes reliance on trust in the server’s certificate and enables man-in-the-middle attackers to spoof servers and access sensitive in...

CVE-2014-5449

Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data...

CVE-2014-5448

Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files...

CVE-2014-5449

Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data...

Design/Logic Flaw

Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data...

Design/Logic Flaw

Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files...

CVE-2014-5449

Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data...

CVE-2014-7061

The MODSIM World 2014 aka com.concursive.modsimworld application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The MODSIM World 2014 aka com.concursive.modsimworld application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7061

The MODSIM World 2014 Android app (version 2.0.0) does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The issue is described across multiple sources as a lack of proper TLS certificate validation...