CVE-2014-5746

vkr_soft government_best_jobs: Sicherheitsluecke

Description

The Government Best Jobs (aka com.wGovernmentBestJobs) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Source: cvelistv5 NVD (NIST)

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

vkr_softgovernment_best_jobs

Metrics

EPSS percentile

17.9 %

Elevated — this CVE ranks above at least 10% of all CVEs scored today.

—

Show all metrics

Severity

none

2.55

Exploit maturity

no public PoC known

0.3 %

Low — model estimates < 1% exploitation likelihood.

Published

2014-09-09 10:00 UTC

References & sources