Skip to content
OpenAdvisories
Unscored CVE-2014-3908 EUVD-2014-3845GHSA-vg9w-vcgp-9r7c

The Amazon.com Kindle application before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid…

Published Aug 30, 2014 · Updated Aug 6, 2024 · Assigned by jpcert

Description

The Amazon.com Kindle application before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

References