CVE-2014-6902

The CVE-2014-6902 entry concerns the Android app Anjuke (com.anjuke.android.app) version 7.1.7, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected...