CVE-2014-6810 in RIMS 2014 Annual Conference

Riassunto

di MITRE

The RIMS 2014 Annual Conference (aka com.coreapps.android.followme.rims2014) application 6.0.7.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 19/09/2014
• Divulgazione: 30/09/2014
• Moderazione: accettato
• Voce: VDB-71642
• CPE: pronto
• CWE: CWE-310 (confermato)
• CVSS: 5.4 (NVD)
• EPSS: 0.00266
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-6810
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-6810
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-6810/