CVE-2014-6653

The Afghan Radio Android app (package com.wordbox.afghanRadio), version 2.5, is affected by CVE-2014-6653 due to not validating X.509 TLS certificates. This allows man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. According to NVD, the impact...