CVE-2014-7591

The CVE-2014-7591 entry concerns the Demon Android app (com.ireadercity.c24) version 3.0.2, which does not verify X.509 certificates from SSL servers. This flaw allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD describes the im...