Security Advisory

CVE-2020-5526

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-01-31 03:35:17
Last updated 2024-08-04 08:30:24
Assigner jpcert
State PUBLISHED

Description

The AWMS Mobile App for Android 2.0.0 to 2.0.5 and for iOS 2.0.0 to 2.0.8 does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.