Description
The Flurry library before 3.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Unscored
CVE-2014-6024
EUVD-2014-5912GHSA-9v8p-fx3j-xxvc
The Flurry library before 3.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers t…
Published Sep 9, 2014 · Updated Aug 6, 2024 · Assigned by mitre