CVE-2014-6722

The CVE-2014-6722 entry affects the Android app “Pescuit Crap Lite” (ro.aventurilapescui.pescuitcrap.lite), version 1.0. The vulnerability stems from the app not verifying X.509 certificates when establishing SSL connections, which allows a man-in-the-middle to spoof servers and obtain sensitive ...