X.509 Certificate Verification Flaw in Find Color Application for Android
CVE-2014-7023

Currently unrated

Key Information:

Vendor: Find Color Project
Status: Find Color
Vendor: CVE Published:; 16 October 2014

🔔 Create Find Color Project Vulnerability Alert

What is CVE-2014-7023?

The Find Color application version 1.1.1 for Android is susceptible to a vulnerability that does not adequately verify X.509 certificates from SSL servers. This oversight enables attackers to execute man-in-the-middle attacks, allowing them to intercept and manipulate data transmitted between the application and the server. As a result, sensitive information may be exposed to unauthorized parties through the use of crafted certificates, posing a significant risk to users' privacy and security.

References

http://www.kb.cert.org/vuls/id/582497

third-party-advisoryx_refsource_CERT-VN

https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJ...

x_refsource_MISC

http://www.kb.cert.org/vuls/id/418905

third-party-advisoryx_refsource_CERT-VN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 16, 2014
Vulnerability Reserved
Sep 19, 2014

CVE-2014-7023 Data

JSON