CVE-2014-7120

The CVE-2014-7120 entry concerns the Android app Model Laboratory (com.magazinecloner.modellaboratory). The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and potentially obtain sensitive information. NVD notes th...

CVE-2014-7120: Undefined Security Weakness

The Model Laboratory aka com.magazinecloner.modellaboratory application @7F080193 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...