CVE-2014-6932

CVE-2014-6932 affects the Android All Navalny app (1.10). The vulnerability is due to the app not verifying X.509 certificates in SSL/TLS, allowing MITM attackers to spoof servers and exfiltrate sensitive information via crafted certificates. Root cause: missing server cert verification during SS...