CVE-2014-7369

The CVE-2014-7369 entry concerns the Android app Il Brillo Parlante (com.wIlBrilloParlante) version 0.1, which fails to verify X.509 certificates when connecting to SSL servers. The root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and access sens...