Man-in-the-Middle Vulnerability in Baidu Navigation for Android
CVE-2014-7444
Currently unrated
What is CVE-2014-7444?
The Baidu Navigation application version 3.5.0 for Android lacks proper verification of X.509 certificates from SSL servers. This vulnerability enables man-in-the-middle attackers to impersonate legitimate servers, potentially allowing them to intercept and manipulate sensitive user information through the use of specially crafted certificates. Users of this application are at risk of unauthorized data access, making secure communication essential for protecting personal information.