Capital One Spark

capital_one_spark

Vendor: Sparkpay • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2014-5867

1Sparkpay

1Capital One Spark

May 6, 2026

Sep 11, 2014

N/A· v4

N/A· v3

5.4 MEDIUM· v2

The Capital One Spark Pay (aka com.capitalone.sparkpay) application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i...Show more