CVE-2014-6879

The CVE-2014-6879 entry concerns the Equifax Mobile app (com.equifax) for Android, version 1.5. The authenticated description states that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft...