CVE-2014-6794

The CVE-2014-6794 entry concerns the AAPLD (com.bredir.boopsie.aapld) Android application, version 4.5.110, which does not verify X.509 certificates from SSL servers. This weakens TLS and enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifica...