CVE-2014-6772

CVE-2014-6772 concerns the Android app United Educational CU (com.metova.cuae.uecu) version 1.0.27, which does not verify SSL server X.509 certificates. This vulnerability allows a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The availabl...