CVE-2014-7757

The CVE-2014-7757 entry concerns the Android app “The Awful Ninja Game” (com.absolutelyawfulapplications.awfulninjagame) version 1.0.23, where SSL/TLS connections fail to verify X.509 certificates from servers. Root cause: missing certificate verification, enabling MITM attackers to spoof servers...