CVE-2014-6693

The CVE-2014-6693 entry concerns the Juiker (aka org.itri) Android application, version 3.2.0829.1, which fails to verify X.509 SSL certificates when connecting to servers. Root cause is lack of certificate verification, enabling man-in-the-middle attackers to spoof legitimate servers and obtain ...