CVE-2014-6798

CVE-2014-6798 affects the Android application McMaster Marauders (package com.weever.marauders) v1.0.1. The vulnerability is in the app’s SSL/TLS certificate verification: it does not verify X.509 certificates from SSL servers. Root cause: the client fails to validate server certificates, enablin...

PT-2014-7476

Name of the Vulnerable Software and Affected Versions com.weever.marauders version 1.0.1 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Recommendatio...