CVE-2014-6000

CVE-2014-6000 affects the FreshDirect Android app (com.freshdirect.android) 2.7.1. The issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause: missing certificate va...