CVE-2014-6712

CVE-2014-6712 affects the Airlines International (aka org.iata.IAMagazine) Android app v1.0, where the client fails to verify X.509 SSL certificates. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The available sources confirm the vulnerabi...

CVE-2014-6712

The Airlines International aka org.iata.IAMagazine application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...