CVE-2014-6712

CVE-2014-6712 affects the Airlines International (aka org.iata.IAMagazine) Android app v1.0, where the client fails to verify X.509 SSL certificates. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The available sources confirm the vulnerabi...