CVE-2014-6859

The CVE-2014-6859 entry applies to Daum Maps - Subway (net.daum.android.map) 3.9.1 on Android, where the app does not verify X.509 certificates from SSL servers. This lack of certificate validation enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted...