CVE-2014-6130 Information

Description

The IBM Notes Traveler application before 9.0.1.3 for Android lacks a warning message during selection of an HTTP session which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which the user had intended to use HTTPS.

Reference

http://www.kb.cert.org/vuls/id/432608 http://www.securityfocus.com/bid/70871 http://www-01.ibm.com/support/docview.wss?uid=swg21688840 https://exchange.xforce.ibmcloud.com/vulnerabilities/96810