CVE-2014-6959 in QinCardinfo

Zusammenfassung

von MITRE

The QinCard (aka com.haowan.qincard) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservieren

19.09.2014

Veröffentlichung

16.10.2014

Moderieren

akzeptiert

Eintrag

VDB-71992

CPE

bereit

EPSS

0.00266

KEV

nein

Aktivitäten

very low

Quellen

Do you need the next level of professionalism?

Upgrade your account now!