Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication

Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication. This opens the application up to a man-in-the-middle attack having all of its encrypted traffic intercepted and read by an attacker.

N/A

证书验证不恰当

Hi Security Virus Cleaner-Antivirus，Booster for Android 安全漏洞

Hi Security Virus Cleaner-Antivirus，Booster for Android是一款基于Android平台的防病毒应用程序。该程序具有病毒清理、垃圾文档清理和应用程序管理等功能。 基于Android平台的Hi Security Virus Cleaner-Antivirus，Booster 3.7.1.1329版本（2017-09-13）中存在安全漏洞，该漏洞源于程序在SSL通信过程中接受所有的SSL证书。攻击者可利用该漏洞实施中间人攻击，劫持并读取所有的加密流量。

N/A

N/A