CVE-2014-7761

CVE-2014-7761 affects the Ink Cards Android app (com.sincerely.android.ink) 2.0.4, where the SSL/TLS client does not verify X.509 certificates. This allows man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. The NVD entry lists a medium base sc...