CVE-2010-4832

Android OS before 2.2 does not display the correct SSL certificate in certain cases, which might allow remote attackers to spoof trusted web sites via a web…

published May 14, 2014

CVSS
—
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

Android OS before 2.2 does not display the correct SSL certificate in certain cases, which might allow remote attackers to spoof trusted web sites via a web page containing references to external sources in which (1) the certificate of the last loaded resource is checked, instead of for the main page, or (2) later certificates are not checked when the HTTPS connection is reused.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00787 · 55.4th percentile
Published
2014-05-14T00:00Z
EPSS history
Timeline
  • 14 MAY 00:00Z
    Android OS before 2.2 does not display the correct SSL certificate in certain cases, which might allow remote attackers to spoof trusted web sites via a web…
    cvelistv5