CVE-2014-7546

The CVE-2014-7546 entry concerns the Android app The Buddhist Prayer (com.buddhist.prayer.mantra.sutra) version 3.0, which does not verify X.509 certificates when validating SSL connections. The root cause is missing certificate validation, allowing MITM attackers to spoof SSL servers and retriev...