CVE-2014-5576: Medium severity Avira Avira Secure Backup Android vulnerability
The Avira Secure Backup (aka com.avira.avirabackup) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5576?
CVE-2014-5576 is considered a critical vulnerability due to its potential for man-in-the-middle attacks.
How do I fix CVE-2014-5576?
To fix CVE-2014-5576, update to a version of Avira Secure Backup that properly verifies X.509 certificates.
What systems are affected by CVE-2014-5576?
CVE-2014-5576 specifically affects Avira Secure Backup version 1.2.3 for Android.
What type of attack does CVE-2014-5576 allow?
CVE-2014-5576 allows man-in-the-middle attackers to spoof servers and potentially intercept sensitive information.
Is CVE-2014-5576 reversible?
Once compromised, the effects of CVE-2014-5576 cannot be reversed without fixing the vulnerability and securing the system.