CVE-2014-7041

The CVE-2014-7041 entry involves the SimGene app (package com.japanbioinformatics.simgene) for Android v1.3 that does not verify SSL X.509 certificates. This enables man-in-the-middle attackers to spoof HTTPS servers and obtain sensitive information via a crafted certificate. The CVSS notes parti...