CVE-2014-6871

The CVE-2014-6871 entry concerns the Android app Hogs Fly Crazy (com.pedrojayme.hogsflycrazy) version 1.0.0, which does not verify X.509 certificates from SSL servers. This configuration flaw allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certif...