CVE-2014-6945

The CVE-2014-6945 entry concerns the Android app Neeku Naaku Dash Dash (com.dakshaa.nndd) version 1.0, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation in SSL/TLS, enabling man-in-the-middle attackers to spoof servers and obtain sensitive infor...