Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Paypal for Android 安全漏洞
Vulnerability Description
Paypal for Android是美国PayPal公司的一套基于Android系统的手机版在线支付应用。 基于Android平台的Paypal 5.3及之前版本中的WebHybridClient.java存在安全绕过漏洞,该漏洞源于程序没有正确验证SSL证书。远程攻击者可利用该漏洞实施中间人攻击或冒充信任的服务器,获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A