CVE-2014-7648

The CVE-2014-7648 entry applies to the SMARTalk Android app (jp.co.fusioncom.smartalk.android) version 1.1, which does not verify X.509 certificates from SSL servers. This improper certificate validation enables man-in-the-middle attackers to spoof servers and access sensitive information via a c...