← Back

Amberfog

amberfog

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Vk Amberfog
vk_amberfog
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-5920
1Amberfog
1Vk Amberfog
May 6, 2026
Sep 18, 2014
N/A· v4
N/A· v3
5.4 MEDIUM· v2
The VK Amberfog (aka com.amberfog.vkfree) application 3.5.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via...Show more
The VK Amberfog (aka com.amberfog.vkfree) application 3.5.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.Show less