CVE-2014-6638 in wTMDesktop
Résumé (Anglaise)
The wTMDesktop (aka com.wTMDesktop) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Réserver
19/09/2014
Divulgation
22/09/2014
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 71427 | wTMDesktop X.509 Certificate chiffrement faible | 310 | Non défini | Non défini | CVE-2014-6638 |