CVE-2014-2001

The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows…

published June 19, 2014

CVSS
—
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00582 · 46.8th percentile
Published
2014-06-19T10:00Z
EPSS history
Timeline
  • 19 JUN 10:00Z
    The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows…
    cvelistv5