CVE-2014-6728

The CVE-2014-6728 entry concerns the ThinkPal Android app (com.mythinkpalapp), version 1.6.3, which does not verify X.509 certificates when establishing SSL connections. Root cause: missing server certificate validation, enabling MITM attackers to spoof servers and read sensitive data via crafted...