CVE-2014-6642 in Mark's Daily Apple Forum
Sumário (Inglês)
The Mark s Daily Apple Forum (aka com.tapatalk.marksdailyapplecomforum) application 2.4.9.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Reservar
19/09/2014
Divulgação
22/09/2014
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 71431 | Mark's Daily Apple Forum X.509 Certificate Encriptação fraca | 310 | Não definido | Não definido | CVE-2014-6642 |