CVE-2014-6756

The CVE-2014-6756 entry affects the Reddit Aww (org.biais.redditawww) Android app v1.2.1, where the app does not verify X.509 certificates from SSL servers. This certificate validation bypass enables MITM attackers to spoof legitimate servers and read or tamper with sensitive data. The NVD entry ...