CVE-2014-6783

The Campus Link - Campus TV HKUSU Android app (package com.campus.tv.hkusu, version 2.2) does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The CVSS notes partial impact to confide...