CVE-2014-6974

The CVE-2014-6974 entry concerns the MifaShow Hairstyles (com.mifashow) Android app, version 3.7. The issue is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD notes a bas...