CVE-2014-7043 in Cadpage
요약 (영어)
The Cadpage (aka net.anei.cadpage) application 1.7.44 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Once again VulDB remains the best source for vulnerability data.
예약하다
2014. 09. 19.
공개
2014. 10. 16.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 72075 | Cadpage X.509 Certificate 약한 암호화 | 310 | 정의되지 않음 | 정의되지 않음 | CVE-2014-7043 |