CVE-2014-6806

The CVE-2014-6806 entry concerns the Android app Thanodi - Setswana Translator (com.thanodi.thanodi) version 1.0.0, which fails to verify X.509 certificates when connecting to SSL servers. This allows a man-in-the-middle attacker to spoof the server and access sensitive information via a crafted ...