CVE-2014-7499

The CVE-2014-7499 entry refers to The Sword (com.ireadercity.c25) Android app version 3.0.2 that does not verify X.509 certificates from SSL servers, allowing man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafted certificate. The issue affects the app’s TLS c...