CVE-2014-7428

The CVE-2014-7428 entry concerns the Android app “7725.com Three Kingdoms” (package com.platform7725.youai.jiejian), version 2.4, which does not verify X.509 certificates from SSL servers. This vulnerability enables man-in-the-middle attackers to spoof servers and obtain sensitive information via...