CVE-2014-7759

The CVE-2014-7759 entry concerns the Jazz Lovers Radio Android app (com.nobexinc.wls_99273254.rc), version 3.2.3, which does not verify SSL/X.509 certificates when connecting to TLS servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted c...