CVE-2014-4898

The CVE-2014-4898 entry concerns the Harivijay Android app (package com.upasanhar.marathi.harivijay) version 4.0, which does not verify X.509 certificates when connecting to SSL servers. This enables man-in-the-middle attackers to spoof servers and access sensitive information via crafted certifi...