CVE-2014-7406

CVE-2014-7406 affects the Deakin University Android application (package com.desire2learn.campuslife.deakin.edu.au.directory, version 1.1.729.1694). The issue is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and obtain sen...