CVE-2014-5912: Medium severity intsig innote vulnerability

Published Sep 17, 2014

Updated

The InNote (aka com.intsig.notes) application 1.0.3.20131119 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected Software

1 affected component

intsig Innote Android=1.0.3.20131119

Event History

Sep 17, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-5912?

CVE-2014-5912 is classified as a high severity vulnerability due to its potential for man-in-the-middle attacks.

How do I fix CVE-2014-5912?

To fix CVE-2014-5912, update the InNote application to a version that properly verifies X.509 certificates.

What type of attack does CVE-2014-5912 allow?

CVE-2014-5912 allows man-in-the-middle attackers to spoof SSL servers and intercept sensitive information.

Which application is affected by CVE-2014-5912?

CVE-2014-5912 affects the InNote application version 1.0.3.20131119 for Android.

What is the impact of not addressing CVE-2014-5912?

Not addressing CVE-2014-5912 could lead to exposure of sensitive data through insecure SSL communications.