CVE-2014-7107

The CVE-2014-7107 entry concerns The Human Factor (com.magzter.thehumanfactor) Android app version 3.01, which fails to verify X.509 certificates from SSL servers. Root cause: missing certificate validation in the app’s SSL/TLS handling. Impact: potential MITM where an attacker could spoof the se...