Improper SSL Certificate Validation in Coles Credit Card Application for Android
CVE-2014-5562

Currently unrated

Key Information:

Vendor: Coles Credit Cards
Status: Coles Credit Card App
Vendor: CVE Published:; 9 September 2014

🔔 Create Coles Credit Cards Vulnerability Alert

What is CVE-2014-5562?

The Coles Credit Card App for Android fails to adequately verify X.509 certificates from SSL servers. This security oversight allows man-in-the-middle attackers to masquerade as legitimate servers. Exploiting this vulnerability, attackers can intercept sensitive information transmitted between users and the app, leading to potential data breaches. Users of the application should ensure they are using the latest version to mitigate these risks.

References

http://www.kb.cert.org/vuls/id/889969

third-party-advisoryx_refsource_CERT-VN

http://www.kb.cert.org/vuls/id/582497

third-party-advisoryx_refsource_CERT-VN

https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJ...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 9, 2014
Vulnerability Reserved
Aug 30, 2014

CVE-2014-5562 Data

JSON