CVE-2014-6798

CVE-2014-6798 affects the Android application McMaster Marauders (package com.weever.marauders) v1.0.1. The vulnerability is in the app’s SSL/TLS certificate verification: it does not verify X.509 certificates from SSL servers. Root cause: the client fails to validate server certificates, enablin...

CVE-2014-6798

The McMaster Marauders aka com.weever.marauders application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...