CVE-2014-6947

CVE-2014-6947 affects the Archie Comics Android app (com.iversecomics.archie.android) version 1.07. The vulnerability is the app’s lack of X.509 certificate verification for SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certi...