CVE-2014-7621

The CVE-2014-7621 entry concerns the Android app EIN Lookup (appinventor.ai_siwanuth.EINLookup) version 1.1, where the app does not verify X.509 certificates from SSL servers. This insecure SSL handling allows man-in-the-middle attackers to spoof legitimate servers and exfiltrate sensitive data t...