CVE-2014-6957

The CVE-2014-6957 entry concerns the Android app scottcolibmn (also known as com.bredir.boopsie.scottlib) version 4.5.110, where the component fails to verify X.509 certificates from SSL servers. The root cause is improper TLS certificate validation, enabling man-in-the-middle attackers to spoof ...