Inadequate SSL Certificate Validation in Facebook Profits on Steroids Application for Android
CVE-2014-7376
Currently unrated
Key Information:
- Vendor
- CVE Published:
- 19 October 2014
What is CVE-2014-7376?
The Facebook Profits on Steroids application version 0.1 for Android is susceptible to man-in-the-middle attacks due to its failure to verify the authenticity of X.509 certificates from SSL servers. This weakness may allow malicious actors to impersonate legitimate servers, potentially leading to unauthorized access to sensitive user information through crafted certificates. As users interact with the application, the lack of proper certificate validation can expose their data to interception and misuse.