CVE-2014-7455

The Zoella Unofficial aka com.automon.ay.zoella application 1.4.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7455

The Zoella Unofficial aka com.automon.ay.zoella application 1.4.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7455

Affected software : Zoella Unofficial Android app (package com.automon.ay.zoella), version 1.4.0.5. Root cause : the implementation does not verify X.509 certificates from SSL servers, enabling MITM spoofing via crafted certificates. Impact : confidentiality, integrity, and possibly availability ...