high7.4
CVE-2013-7201
WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i…
Impact
WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paypal | Paypal | through 5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/57351
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92098
- https://labs.mwrinfosecurity.com/advisories/paypal-remote-code-execution/
- http://secunia.com/advisories/57351
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92098
- https://labs.mwrinfosecurity.com/advisories/paypal-remote-code-execution/