CVE-2014-6673

The CVE-2014-6673 entry concerns the ChallengerTX Android app (package com.zhtiantian.ChallengerTX) version 3.9.12.5. The root cause is the app’s failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information through a...