CVE-2014-7106

The CVE-2014-7106 entry concerns the Orakel-Ball (com.wOrakelball) Android app version 0.2. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and extract sensitive information via crafted certificate...