CVE-2014-7735

The Dr. Sheikh Adnan Ibrahim aka com.amitaff.adnanIbrahim application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7735

The CVE-2014-7735 entry applies to the Android app “Dr. Sheikh Adnan Ibrahim” (com.amitaff.adnanIbrahim) version 1.0, which does not verify X.509 certificates when establishing SSL connections. Root cause: absence of certificate validation allows MITM attackers to spoof servers and read sensitive...