CVE-2014-6963

The CVE-2014-6963 entry concerns the feiron (aka es.sw.feironmobile.app) Android application, version 1.1. The root cause is that the app does not verify X.509 certificates from SSL servers, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted ...