CVE-2014-6715

The CVE-2014-6715 entry concerns the SlotMachine Android app (com.popoinnovation.SlotMachine) version 1.03, where X.509 certificate verification for SSL/TLS connections is not performed. Root cause: lack of certificate validation enables MITM attackers to spoof servers and exfiltrate sensitive in...