CVE-2014-6656

The CVE-2014-6656 entry concerns the Android app drareym (com.drareym) version 0.1 that does not verify X.509 certificates from SSL servers. This weakness enables man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted certificate. The available connected sour...

PT-2014-7334

Name of the Vulnerable Software and Affected Versions com.drareym aka drareym application version 0.1 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...