Security Flaw in Fabasoft Cloud Android Application
CVE-2014-7560

Currently unrated

Key Information:

Vendor: Fabasoft
Status: Fabasoft Cloud
Vendor: CVE Published:; 20 October 2014

What is CVE-2014-7560?

The Fabasoft Cloud application version 3.0.1 for Android contains a significant security flaw where it fails to properly verify X.509 certificates from SSL servers. This oversight opens the door for man-in-the-middle attackers to spoof legitimate servers, potentially leading to the interception and compromise of sensitive user data. Users of this application are advised to take immediate precautions to safeguard their information from potential threats.

References

http://www.kb.cert.org/vuls/id/178753

third-party-advisoryx_refsource_CERT-VN

http://www.kb.cert.org/vuls/id/582497

third-party-advisoryx_refsource_CERT-VN

https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJ...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 20, 2014
Vulnerability Reserved
Oct 3, 2014

CVE-2014-7560 Data

JSON