CVE-2014-6817

The CVE-2014-6817 entry concerns The Cove app (org.covechurch.app) for Android 1.0.2, which does not verify X.509 certificates from SSL servers. This failure enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Public sources in the prov...