CVE-2014-1967

CVE-2014-1967 concerns the Android app “Denny’s App for Android” (prior to version 2.0.1), which fails to verify X.509 SSL server certificates. This allows a remote attacker to perform a man‑in‑the‑middle attack, potentially eavesdropping or spoofing the server to obtain sensitive information via...