CVE-2014-6854

CVE-2014-6854 affects the EyeXam Android app (com.globaleyeventures.eyexam) version 1.4. The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. Root cause is mi...