CVE-2014-6964

The CVE-2014-6964 entry concerns the Android app Hanyang University Admissions (kr.ac.hanyang.planner) version 2.1.3, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation in SSL/TLS, enabling man-in-the-middle attackers to spoof servers and obtain ...