Mega Jump CVE-2014-5632 SSL Certificate Validation Security Bypass Vulnerability
BID:70122
Info
Mega Jump CVE-2014-5632 SSL Certificate Validation Security Bypass Vulnerability
| Bugtraq ID: | 70122 |
| Class: | Design Error |
| CVE: |
CVE-2014-5632 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 08 2014 12:00AM |
| Updated: | Sep 08 2014 12:00AM |
| Credit: | Will Dormann of the CERT/CC |
| Vulnerable: |
Getsetgames Mega Jump @7F080002 ~~~Android |
| Not Vulnerable: | |
Discussion
Mega Jump CVE-2014-5632 SSL Certificate Validation Security Bypass Vulnerability
Mega Jump for Android is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Mega Jump @7F080002 is vulnerable; other versions may also be affected.
Mega Jump for Android is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Mega Jump @7F080002 is vulnerable; other versions may also be affected.
References
Mega Jump CVE-2014-5632 SSL Certificate Validation Security Bypass Vulnerability
References:
References:
- Mega Jump Homepage (Getsetgames)
- VU#582497 Multiple Android applications fail to properly validate SSL certificat (KB CERT)