Threats tagged 'ghsa-8x2g-62ph-3xcj'

The LaserGest mobile application disables TLS certificate and hostname verification by using setServerTrustMode("nocheck"), which allows man-in-the-middle attackers to intercept or modify network traffic, including sensitive credentials and API communications. This vulnerability undermines the security of TLS connections, exposing users to significant risks.