CVE-2014-6992

The CVE-2014-6992 entry concerns the Timeless Black (com.apptive.android.apps.timeless) Android app (version 2.10.6) that does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificat...