CVE-2014-6716

The CVE-2014-6716 entry concerns the Android app fastin (1.0, also known as moda.azyae.fastin.net). The underlying issue is that the app does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a...