CVE-2014-7024

The CVE-2014-7024 entry affects the Android app “The Hardest Game Collection” (com.lotfun.abuse) v1.5.0. The issue: the app does not verify X.509 certificates when connecting to SSL servers, allowing a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. ...