CVE-2014-6887

5.4

MEDIUMCVSS v2

Published

October 11, 2014

Affected

3 projects

Assigned by

[email protected]

Severity scale

010

Description

The EXPRESS (aka com.gpshopper.express.android) application 2.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

express

NPMFast, unopinionated, minimalist web framework

= 2.5.3NVD

expressjs/express

GitHubFast, unopinionated, minimalist web framework for node.

= 2.5.3NVD

express

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Express generates a slimmed-down Rails application that leaves out anything not urgently needed for content-oriented sites. Your Rails app will launch very, very fast.

= 2.5.3NVD

Security Advisories

CVE-2014-6887

Description

More on this CVE