CVE-2014-6001

CVE-2014-6001 affects the Android gewara (com.gewara) app version 5.2.3, where the code does not verify X.509 certificates from SSL servers. This root cause allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The entry notes a moderate i...