CVE-2014-7439

The CVE-2014-7439 entry concerns the Android app bene+ odmeny a slevy (cz.gemoney.bene.android) v1.2.3, which does not verify X.509 certificates when connecting to SSL servers. This permits MITM攻击 where an attacker can spoof servers and access sensitive information via a crafted certificate. The ...