CVE-2014-7566

The CVE concerns the Stift Neuburg (aka de.appack.project.neuburg) Android application version 1.1, which does not verify X.509 certificates from SSL servers. This creates a vulnerability to man-in-the-middle attacks, allowing an attacker to spoof servers and access sensitive information via a cr...