CVE-2014-6649

The CVE concerns the MyBroadband Tapatalk Android app (3.9.22) failing to verify X.509 certificates when connecting to SSL servers, enabling potential man‑in‑the‑middle attackers to spoof servers and exfiltrate sensitive data. The available records confirm the vulnerable component (Android app), ...