CVE-2014-6867

The Sortir en Alsace aka com.axessweb.sortirenalsace application 0.5b for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6867

The CVE-2014-6867 entry relates to the Sortir en Alsace (aka com.axessweb.sortirenalsace) Android application version 0.5b, which reportedly does not verify X.509 certificates presented by SSL servers. The underlying issue is a failure to validate certificates, enabling man-in-the-middle attacks ...