CVE-2014-7569

CVE-2014-7569 affects the Android app “Best Greatness Quotes” (1.0). It does not verify X.509 certificates when connecting to SSL servers, enabling potential man-in-the-middle disclosure of sensitive data via a crafted certificate. The issue is tied to the app’s TLS certificate validation logic (...

CVE-2014-7569: Undefined Security Weakness

The Best Greatness Quotes aka best.free.greatness.quotes.android.app application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...