| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-5908 | 5.4 |
The Kmart (aka com.kmart.android) application @7F0C00EF for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
|
22-09-2014 - 20:37 | 17-09-2014 - 06:55 | |
| CVE-2014-5870 | 5.4 |
The Kmart (aka com.kmart.android) application 6.2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
|
21-09-2014 - 19:58 | 11-09-2014 - 06:55 |
