CVE-2014-7362: Medium severity naranjascontocados vulnerability

Published Oct 19, 2014

Updated

The Naranjas Con Tocados (aka com.NaranjasConTocados.com) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected Software

1 affected component

NaranjasConTocados Naranjas Con Tocados Android=0.1

Event History

Oct 19, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-7362?

CVE-2014-7362 is considered a high severity vulnerability due to its potential for man-in-the-middle attacks.

How do I fix CVE-2014-7362?

To fix CVE-2014-7362, you should update the Naranjas Con Tocados application to a version that properly verifies X.509 certificates.

What type of attack does CVE-2014-7362 allow?

CVE-2014-7362 allows man-in-the-middle attackers to spoof SSL servers and intercept sensitive information.

What software is affected by CVE-2014-7362?

CVE-2014-7362 affects the Naranjas Con Tocados application version 0.1 for Android.

What is the impact of CVE-2014-7362?

The impact of CVE-2014-7362 includes potential exposure of sensitive information due to unverified SSL certificate connections.