SSL Certificate Verification Flaw in FREE Pageplus Activation App for Android
CVE-2014-5745

Currently unrated

Key Information:

Vendor: Free Pageplus Activation Project
Status: Free Pageplus Activation
Vendor: CVE Published:; 9 September 2014

🔔 Create Free Pageplus Activation Project Vulnerability Alert

What is CVE-2014-5745?

The FREE Pageplus Activation application for Android version 0.1 has a serious security flaw where it fails to properly verify X.509 certificates from SSL servers. This oversight allows attackers to execute man-in-the-middle (MitM) attacks, enabling them to spoof legitimate servers. As a result, sensitive information could be intercepted, posing significant risks to user data integrity and confidentiality.

References

http://www.kb.cert.org/vuls/id/169865

third-party-advisoryx_refsource_CERT-VN

http://www.kb.cert.org/vuls/id/582497

third-party-advisoryx_refsource_CERT-VN

https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJ...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 9, 2014
Vulnerability Reserved
Aug 30, 2014

CVE-2014-5745 Data

JSON