← Back

Unicreditgroup

unicreditgroup

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Unicredit Investors
unicredit_investors
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-7040
1Unicreditgroup
1Unicredit Investors
May 6, 2026
Oct 16, 2014
N/A· v4
N/A· v3
5.4 MEDIUM· v2
The UniCredit Investors (aka eu.unicreditgroup.brand.ucinvestors) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens...Show more
The UniCredit Investors (aka eu.unicreditgroup.brand.ucinvestors) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.Show less