CVE-2014-6687

The CVE-2014-6687 entry concerns the Android app wSaudichannelAlNasr (com.wSaudichannelAlNasr) version 0.1, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation enables MITM attackers to spoof servers and access sensitive information via a crafted ...