CVE-2014-6020

The CVE-2014-6020 entry describes a vulnerability in the Fuel Rewards Network Android app (com.excentus.frn) where SSL/TLS servers’ X.509 certificates are not verified, enabling MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. According to the NVD entry, th...