CVE-2014-7457

The CVE-2014-7457 entry concerns the Electronics For You Android app (com.magzter.electronicsforyou) version 3.02, where SSL server certificate verification is not performed. This allows MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The issue is describe...