CVE-2014-7542: Medium severity ibm infosphere information server vulnerability

Published Oct 20, 2014

Updated

The l'Informatiu (aka com.linformatiu.spm) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected Software

1 affected component

Staperpetua L\'informatiu Android=2

Event History

Oct 20, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-7542?

CVE-2014-7542 has a high severity rating due to the risk of man-in-the-middle attacks that can compromise user data.

How do I fix CVE-2014-7542?

To fix CVE-2014-7542, users should update the l'Informatiu application to a version that properly verifies X.509 certificates.

What type of attack does CVE-2014-7542 expose users to?

CVE-2014-7542 exposes users to man-in-the-middle attacks, allowing attackers to spoof servers.

What versions of the l'Informatiu app are affected by CVE-2014-7542?

Only version 2.0 of the l'Informatiu application is affected by CVE-2014-7542.

What data is at risk due to CVE-2014-7542?

CVE-2014-7542 puts sensitive user information at risk through potential interception by attackers.