CVE-2014-7796

The CVE-2014-7796 entry concerns House365 Radio (Android, com.nobexinc.wls_27853803.rc) v3.2.3 where the app does not verify X.509 certificates from SSL servers. This implementation flaw enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificat...