CVE-2014-7314

The CVE-2014-7314 entry concerns the Android app “The Intelligent SME” (com.magzter.intelligentsme) version 3.0, which does not verify X.509 certificates when connecting to SSL servers. This allows a man-in-the-middle attacker to spoof servers and exfiltrate sensitive information via a crafted ce...