CVE-2014-6993

The CVE-2014-6993 entry concerns the Codeeta Coupons (com.codeeta.promos) Android app version 1.0.5, which does not verify X.509 SSL certificates. This weakness enables a man‑in‑the‑middle attacker to spoof the server and exfiltrate sensitive information via a crafted certificate. The vulnerabili...