CVE-2014-6749

The CVE-2014-6749 entry concerns the Android app for the American Nurses Association (com.dub.poweredbydub.assoc.ana), version 1.0.0. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and extract sensitive inf...