CVE-2014-7084

The CVE-2014-7084 entry concerns the Android app Hesheng 80 (package com.ireadercity.c29), version 3.0.2, which does not verify X.509 certificates from SSL servers. Root cause: TLS/SSL certificate verification is bypassed, enabling a man-in-the-middle to spoof servers and leak sensitive informati...