CVE-2014-7125

The Motor (com.magzter.motorhwpublishing) Android app, version 3.0, fails to verify X.509 certificates when establishing SSL connections. This allows a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability affects trust in SSL/TL...