CVE-2014-7587

The CVE-2014-7587 entry concerns the Blocked in Free (com.blueup.blocked) Android application 1.0, where SSL certificate validation is not performed. This allows man-in-the-middle attackers to spoof servers and capture sensitive information via a crafted certificate. The issue is documented in mu...