CVE-2014-6645

CVE-2014-6645 affects the Batch library for Android, where the SSL/TLS layer does not verify X.509 certificates from servers. This enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate. Documented details come from NVD/NVD-relat...