X.509 Certificate Validation Flaw in Android Application by Seven Bulls
CVE-2014-5548

Currently unrated

Key Information:

Vendor: Seven Bulls
Status: Christmas Words
Vendor: CVE Published:; 9 September 2014

🔔 Create Seven Bulls Vulnerability Alert

What is CVE-2014-5548?

The Christmas Words application by Seven Bulls for Android fails to properly validate X.509 certificates from SSL servers. This oversight opens the door for man-in-the-middle attackers to impersonate legitimate servers through the use of a maliciously crafted certificate, potentially leading to unauthorized access to sensitive user data and other security implications.

References

http://www.kb.cert.org/vuls/id/857673

third-party-advisoryx_refsource_CERT-VN

http://www.kb.cert.org/vuls/id/582497

third-party-advisoryx_refsource_CERT-VN

https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJ...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 9, 2014
Vulnerability Reserved
Aug 30, 2014

CVE-2014-5548 Data

JSON