CVE-2014-7567
The CVE-2014-7567 entry concerns the Android client iMig 2012 (com.webges.imig) 1.0.0, which fails to verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof legitimate servers and extract sensitive information via a crafted certificate. Root cause: lack of c...