CVE-2014-6678

The Algeria Radio Android app (com.wordbox.algeriaRadio) version 2.5 does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. This affects the app’s ability to ensure secure TLS connectio...