CVE-2014-6973

The CVE-2014-6973 entry concerns the Android app Care4Kids (com.codetherapy.care4kids) v1.03, where the application does not verify X.509 certificates from SSL servers. This root cause (missing certificate validation) enables a man-in-the-middle to spoof servers and obtain sensitive information v...