Tracker / CVE-2014-5239
CVE-2014-5239
Medium 4.0
The Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected products and versions
| microsoft | outlook.com |
|---|---|
| microsoft | outlook.com · … → 7.8.2.12.49.6434 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.