CVE-2014-7776

The Kavita KS (com.snaplion.kavitaks) Android app, version 2.4, does not verify X.509 certificates from SSL servers, leading to potential MITM exploitation. An attacker could spoof legitimate servers and obtain sensitive information via a crafted certificate. The vulnerability directly enables pa...