CVE-2014-6830 in Covet Fashion - Shopping Gameinfo

Zusammenfassung

von MITRE

The Covet Fashion - Shopping Game (aka com.crowdstar.covetfashion) application 2.14.40 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservieren

19.09.2014

Veröffentlichung

30.09.2014

Moderieren

akzeptiert

Eintrag

VDB-71661

CPE

bereit

EPSS

0.00266

KEV

nein

Aktivitäten

very low

Quellen

Do you know our Splunk app?

Download it now for free!