CVE-2014-6829

The CVE-2014-6829 entry concerns the Android app The Hook (com.hook.android) version 0.9.3, which does not verify X.509 certificates from SSL servers. This certificate validation flaw allows man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted cer...