CVE-2019-14516 - The mAadhaar application 1.2.7 for Android lacks SSL Certificate Validation, leading to man-in-the-middle attacks against requests for FAQs or Help

HIGH

The mAadhaar application 1.2.7 for Android lacks SSL Certificate Validation, leading to man-in-the-middle attacks against requests for FAQs or Help

Published Aug 13, 2019

7.4

HIGH

CVSS 3.0

EPSS 0.70%

The mAadhaar application 1.2.7 for Android lacks SSL Certificate Validation, leading to man-in-the-middle attacks against requests for FAQs or Help.

No remediation recorded yet.

Weaknesses (1)

CWE-295

Improper Certificate Validation

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5690		Advisory
https://github.com/fs0c131y/ConPresentations/blob/master/AppSecVillageDefcon27.mAadhaar.pdf		x_refsource_MISCExploitThird Party Advisory
https://play.google.com/store/apps/details?id=in.gov.uidai.mAadhaarPlus&hl=en_US		x_refsource_MISCVendor Advisory