CVE-2014-7617

The CVE-2014-7617 entry corresponds to the Android app www.roads365.com (aka ydx.android) version 1.0.1, which does not verify X.509 certificates from SSL servers. The root cause is broken SSL certificate validation in the client, enabling man-in-the-middle attackers to spoof servers and obtain s...