X.509 Certificate Verification Flaw in Weibo App for Android
CVE-2014-6805

Currently unrated

Key Information:

Vendor: Weibo Project
Status: Weibo
Vendor: CVE Published:; 30 September 2014

🔔 Create Weibo Project Vulnerability Alert

What is CVE-2014-6805?

The Weibo application version 1.2 for Android fails to properly validate X.509 certificates from SSL servers, leaving users vulnerable to man-in-the-middle attacks. Attackers can exploit this flaw to impersonate legitimate servers, potentially compromising sensitive user information through maliciously crafted certificates. This issue emphasizes the importance of robust certificate validation mechanisms to maintain user security and data integrity.

References

http://www.kb.cert.org/vuls/id/555041

third-party-advisoryx_refsource_CERT-VN

http://www.kb.cert.org/vuls/id/582497

third-party-advisoryx_refsource_CERT-VN

https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJ...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 30, 2014
Vulnerability Reserved
Sep 19, 2014

CVE-2014-6805 Data

JSON