Description
The Chartboost library before 2.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Unscored
CVE-2014-6025
EUVD-2014-5913GHSA-3wgw-9fm4-w9hv
The Chartboost library before 2.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attacke…
Published Sep 9, 2014 · Updated Aug 6, 2024 · Assigned by mitre