CVE-2014-6957

The CVE-2014-6957 entry concerns the Android app scottcolibmn (also known as com.bredir.boopsie.scottlib) version 4.5.110, where the component fails to verify X.509 certificates from SSL servers. The root cause is improper TLS certificate validation, enabling man-in-the-middle attackers to spoof ...

CVE-2014-6957: Undefined Security Weakness

The scottcolibmn aka com.bredir.boopsie.scottlib application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...