CVE-2014-5881: Medium severity yahoo yahoo vulnerability
The Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5881?
CVE-2014-5881 is classified as a medium severity vulnerability due to the risk of man-in-the-middle attacks.
How do I fix CVE-2014-5881?
To fix CVE-2014-5881, update the Yahoo! Japan Box application to a version that properly verifies SSL certificates.
What impacts does CVE-2014-5881 have on mobile security?
CVE-2014-5881 can lead to the exposure of sensitive user information through unsecured communication channels.
Who is affected by CVE-2014-5881?
Users of the Yahoo! Japan Box application version 1.5.1 on Android devices are affected by CVE-2014-5881.
What type of attack can exploit CVE-2014-5881?
CVE-2014-5881 can be exploited via man-in-the-middle attacks where an attacker can spoof server communications.