CVE-2014-7538

The CVE-2014-7538 entry concerns The Headlines news India Android app (package com.dreamstep.wHEADLINESNEWSINDIA, version 0.21.13219.95110) failing to verify X.509 certificates when connecting to SSL servers. This lack of certificate validation enables man‑in‑the‑middle attackers to spoof servers...