CVE-2014-7800

The CVE-2014-7800 entry concerns The Daily Green (Android app, 2014.07 dlygrn) that does not verify X.509 certificates when connecting to SSL servers. The root cause is missing TLS certificate validation, enabling man-in-the-middle attackers to spoof servers and potentially disclose sensitive inf...