CVE-2014-7469

The CVE-2014-7469 entry concerns The Best Beginning (com.bbbeta) Android app v2.0 that does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. The vulnerability is rooted in...