CVE-2014-6827

The CVE-2014-6827 entry involves the DK ONLINE Beta Android app (com.sgmobile.dkonline) version 1.0.2 where SSL servers’ X.509 certificates are not verified. This allows MITM attackers to spoof servers and read sensitive data via crafted certificates. The publicly available data confirms the vuln...