CVE-2014-6749 in Ananursespace American Nurses Association

Сводка (Английский)

The American Nurses Association (aka com.dub.poweredbydub.assoc.ana) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Резервировать

19.09.2014

Раскрытие

27.09.2014

Записи

VulDB provides additional information and datapoints for this CVE:

ИД	Уязвимость	CWE	Экс	Кон	CVE
71569	Ananursespace American Nurses Association X.509 Certificate слабое шифрование	310	Не определено	Не определено	CVE-2014-6749