CVE-2014-6025

The CVE-2014-6025 entry concerns the Chartboost library for Android prior to version 2.0.2, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof a server and access sensitive information via a crafted certificate. The vulnerability ...