CVE-2014-7800: Undefined Security Weakness

The Daily Green aka it.opentt.blog.dailygreen application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8283

Name of the Vulnerable Software and Affected Versions The Daily Green aka it.opentt.blog.dailygreen application version 2014.07 dlygrn Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not...