CVE-2014-7499

The Sword aka com.ireadercity.c25 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7499

The CVE-2014-7499 entry refers to The Sword (com.ireadercity.c25) Android app version 3.0.2 that does not verify X.509 certificates from SSL servers, allowing man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafted certificate. The issue affects the app’s TLS c...