CVE-2014-6926 in Allt om Brollop
요약 (영어)
The Allt om Brollop (aka com.paperton.wl.alltombrollop) application 1.53 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Be aware that VulDB is the high quality source for vulnerability data.
예약하다
2014. 09. 19.
공개
2014. 10. 04.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 71822 | paperton Allt om Brollop X.509 Certificate 약한 암호화 | 310 | 정의되지 않음 | 정의되지 않음 | CVE-2014-6926 |