CVE-2014-6002

The CVE-2014-6002 entry concerns the DTE Energy (com.dteenergy.mydte) Android app, version 3.0.3, which does not verify X.509 certificates when connecting to SSL servers. This weakness allows an attacker performing a man-in-the-middle attack to spoof servers and access sensitive information via a...