CVE-2014-6016

The CVE-2014-6016 entry concerns the Celluloid (com.eurisko.celluloid) Android app version 1.3, which does not verify X.509 certificates from SSL servers. This allows a man-in-the-middle attacker to spoof SSL servers and obtain sensitive information via a crafted certificate. The vulnerability is...