CVE-2014-6758

The CVE-2014-6758 entry concerns The Qin Story Android app (1.00) that does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attacks to spoof servers and obtain sensitive information. The root cause is missing certificate validation in SSL/TLS; impact is partial confiden...