CVE-2014-7326

The CVE-2014-7326 entry concerns ETA Mobile (com.en2grate.etamobile) Android app 1.6.6, which does not verify X.509 certificates from SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Public sources in the Connected documents conf...