CVE-2014-5580 in BackgroundCheckProToolinfo

Zusammenfassung

von MITRE

The BackgroundCheckProTool (aka com.BackgroundCheckProTool) application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservieren

30.08.2014

Veröffentlichung

08.09.2014

Moderieren

akzeptiert

Eintrag

VDB-70884

CPE

bereit

EPSS

0.00271

KEV

nein

Aktivitäten

very low

Quellen

Want to know what is going to be exploited?

We predict KEV entries!