The LaLa Call App for Android 2.4.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: jpcert
Published: 2017-04-28T16:00:00
Updated: 2024-08-05T13:39:32.308Z
Reserved: 2016-12-01T00:00:00
Link: CVE-2017-2103
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-04-28T16:59:00.777
Modified: 2017-05-10T17:41:55.463
Link: CVE-2017-2103
Redhat
No data.