CVE-2014-6928 in Rastreador de Celulares
Сводка (Английский)
The Rastreador de Celulares (aka com.mobincube.android.sc_9KTH8) application 5.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Резервировать
19.09.2014
Раскрытие
04.10.2014
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 71824 | Rastreador de Celulares X.509 Certificate слабое шифрование | 310 | Не определено | Не определено | CVE-2014-6928 |