CVE-2014-7038

The CVE-2014-7038 entry describes a vulnerability in the Al Jazeera Android app (package com.Al.Jazeera.net) version 6.0 where SSL certificate validation is not performed. The underlying issue is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof ...