CVE-2014-6731

The CVE-2014-6731 entry concerns the Alfa-Bank Android app (package ru.alfabank.mobile.android) version 5.5.1.1, which does not verify X.509 certificates when establishing SSL connections. This Certificate Validation failure enables man-in-the-middle attackers to spoof servers and obtain sensitiv...