CVE-2014-7397

The CVE-2014-7397 entry applies to the Android app “ileri Gazetesi - Yozgat” (com.byfes.ilerigazetesi) 1.0, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation in the app’s SSL/TLS handling. Impact: enables MITM attackers to spoof servers and obta...