CVE-2014-7409

The CVE-2014-7409 entry concerns the Android app Liburan Hemat (package com.liburan.bro ) version 1.0, which does not verif y SSL server certificates. The underlying issue is missing X.509 certificate verification, enabling a man-in-the-middle attacker to spoof servers and obtain sensitive inform...