| Package | Affected versions | Patched versions |
|---|---|---|
| outlook.com | = 7.8.2.10.47.7365= 7.8.2.11.48.4848= 7.8.2.12.49.0430= 7.8.2.12.49.5701≤ 7.8.2.12.49.6434 |
The Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free