CVE-2014-6965

The vulnerability CVE-2014-6965 affects the FAZ.NET (net.faz.FAZ) Android app version 1.0.1, which does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The provided sources confir...