CVE-2014-7437

The CVE-2014-7437 entry describes a vulnerability in the Android app “The Love Horoscope Guide” (com.charl.charlylovehoroscopes) 1.0 where SSL/TLS X.509 certificates are not verified by the client when connecting to servers. This allows man-in-the-middle attackers to spoof servers and obtain sens...