CVE-2014-6843

The CVE-2014-6843 entry concerns the Sweatshop Android app (version 2.96) which does not verify X.509 certificates from SSL servers. This allows a man-in-the-middle attacker to spoof the TLS endpoint and exfiltrate sensitive data via a crafted certificate. The connected records confirm the affect...