CVE-2014-6797

The CVE-2014-6797 entry concerns the Android app Abu Ali Anasheeds (com.faapps.abuali_anasheeds) version 1.1, where the app does not verify X.509 certificates presented by SSL servers. This flaw allows man-in-the-middle attackers to spoof a server and access sensitive information via a crafted ce...

CVE-2014-6797: Undefined Security Weakness

The Abu Ali Anasheeds aka com.faapps.abualianasheeds application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...