CVE-2014-6778

The CVE-2014-6778 entry concerns The Goat Forum (com.gcspublishing.goatspot) Android app, version 3.9.15, which does not verify X.509 certificates from SSL servers. This lack of certificate validation permits man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a craf...