CVE-2014-6932 in All Navalnyinfo

Summary

The All Navalny (aka com.all.navalny) application 1.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

09/19/2014

Disclosure

10/04/2014

Entries

1

CPE

ready

CVSS

6.3

EPSS

0.00099

Activities

Very Low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2014-6932
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2014-6932
CVE Detailshttps://www.cvedetails.com/cve/CVE-2014-6932/

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!