CVE-2014-6738

The CVE-2014-6738 entry concerns the Maccabi Tel Aviv Android app (com.monkeytech.maccabi) version 1.0, which does not verify X.509 certificates when communicating with SSL servers. The root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and access ...

PT-2014-7416

Name of the Vulnerable Software and Affected Versions com.monkeytech.maccabi version 1.0 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Recommendatio...