CVE-2014-6656

The CVE-2014-6656 entry concerns the Android app drareym (com.drareym) version 0.1 that does not verify X.509 certificates from SSL servers. This weakness enables man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted certificate. The available connected sour...