CVE-2014-7795

The CVE-2014-7795 entry concerns the Android app Harpers Bazaar Art (package com.itp.harpersart, reference @7F080181) that does not verify X.509 certificates when establishing SSL connections. This permits man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...