{ "schema_version": "1.4.0", "id": "GHSA-7w5r-vrm3-34vv", "modified": "2022-05-17T04:35:22Z", "published": "2022-05-17T04:35:22Z", "aliases": [ "CVE-2014-5784" ], "details": "The Bouncy Bill Seasons (aka mominis.Generic_Android.Bouncy_Bill_Seasons) application 1.3.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5784" }, { "type": "WEB", "url": "https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing" }, { "type": "WEB", "url": "http://www.kb.cert.org/vuls/id/114865" }, { "type": "WEB", "url": "http://www.kb.cert.org/vuls/id/582497" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2014-09-09T10:55:00Z" } }