CVE-2014-7725

The CVE-2014-7725 entry concerns the Rally Albania Live 2014 Android app (com.wRallyAlbaniaLIVE2014), version 0.11, which does not verify X.509 certificates from SSL servers. This weakness allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifica...