CVE-2014-7106

The CVE-2014-7106 entry concerns the Orakel-Ball (com.wOrakelball) Android app version 0.2. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and extract sensitive information via crafted certificate...

CVE-2014-7106: Undefined Security Weakness

The Orakel-Ball aka com.wOrakelball application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...