CVE-2014-7066

CVE-2014-7066 affects the LegalEra (com.magzter.legalera) Android app version 3.0. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attacks to spoof servers and access sensitive information via a crafted certificate. The NVD entry list...