CVE-2014-6962

The Elk Grove PublicStuff aka com.wassabi.elkgrove application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6962

The CVE-2014-6962 entry corresponds to the Elk Grove PublicStuff Android app (package com.wassabi.elkgrove) version 3.2, which does not verify X.509 certificates from SSL servers. This creates a vulnerability where man-in-the-middle attackers could spoof servers and access sensitive information v...