CVE-2014-7414

CVE-2014-7414 affects the Android app CLEO Malaysia (com.magzter.cleomalaysia) version 3.01. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. CVSS metrics ...