CVE-2014-5733

The Shop Love (aka com.waterwish.shoplove) application 1.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:water_wish:shop_love:1.05:*:*:*:*:android:*:*

Information

Published : 2014-09-09 03:55

Updated : 2014-09-11 20:02


NVD link : CVE-2014-5733

Mitre link : CVE-2014-5733


JSON object : View

CWE
CWE-310

Cryptographic Issues

Advertisement

dedicated server usa

Products Affected

water_wish

  • shop_love