CVE-2014-6720

The CVE-2014-6720 entry concerns the Android app Pesca de Carpa Lite (com.clearfishing.pescadecarpa.lite) version 1.0, which fails to verify X.509 certificates when connecting to SSL servers. This undermines TLS trust and enables man-in-the-middle attackers to spoof the SSL server and access sens...