CVE-2014-6880

The CVE-2014-6880 entry concerns the TradeHero Android app (com.tradehero.th) version 2.2.5, which does not verify X.509 certificates from SSL servers. This omission enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The provided docum...