CVE-2014-7342

The CVE-2014-7342 entry affects the Android application Echo News (package com.solo.report) in version 1.10 (beta). The underlying issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive in...