CVE-2014-6677

The CVE-2014-6677 entry applies to The Ticket Round Up (com.xcr.android.ticketroundupapp) on Android, version 3.0.1, where the app does not verify X.509 certificates from SSL servers. This certificate validation failure enables a man-in-the-middle to spoof servers and access sensitive information...