CVE-2014-7490

The CVE-2014-7490 entry concerns the Android app Menaka - Marathi (com.magzter.menakamarathi) 3.0, which does not verify X.509 certificates from SSL servers. This missing certificate validation can allow a man-in-the-middle to spoof servers and steal sensitive information via crafted certificates...