CVE-2014-4884

The CVE-2014-4884 entry concerns the Android application Conrad Hotel (com.wConradHotel) version 0.1, which does not verify X.509 certificates when establishing TLS connections. This improper certificate validation enables man-in-the-middle attackers to spoof SSL servers and capture sensitive inf...