CVE-2014-7325

The CVE-2014-7325 entry concerns the Android app “Business Intelligence” (com.magzter.businessintelligence) version 3.0, which does not verify X.509 certificates when connecting to SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive informati...