CVE-2014-6796

The CVE-2014-6796 entry concerns the Android LocalSense (com.LocalSense) app v1.2.1, which does not verify X.509 certificates from SSL servers. This improper TLS validation enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The aff...