← Back

Sparkpay

sparkpay

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Capital One Spark
capital_one_spark
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-5867
1Sparkpay
1Capital One Spark
May 6, 2026
Sep 11, 2014
N/A· v4
N/A· v3
5.4 MEDIUM· v2
The Capital One Spark Pay (aka com.capitalone.sparkpay) application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i...Show more
The Capital One Spark Pay (aka com.capitalone.sparkpay) application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.Show less