CVE-2014-7242 | BDVDB-2026-91708 Detail

Description#

The SumaHo application 3.0.0 and earlier for Android and the SumaHo "driving capability" diagnosis result transmission application 1.2.2 and earlier for Android allow man-in-the-middle attackers to spoof servers and obtain sensitive information by leveraging failure to verify SSL/TLS server certificates.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://jvn.jp/en/jp/JVN27388160/index.html
http://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000125.html

Exploit#

No public exploit known

History#

Version 12017-10-18Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.