CVE-2014-7433

The CVE-2014-7433 entry concerns the Android app “Student ID” (com.computas.studentbevis) version 1.2, which does not verify X.509 certificates when connecting to SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. According to NVD,...