CVE-2014-7643

The CVE-2014-7643 entry concerns the C.R. Group (aka com.c.r.group) Android application version 1.0, which does not verify X.509 certificates from SSL servers. This failure allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connecte...