CVE-2014-7595

The CVE-2014-7595 entry concerns the devada.co.uk (com.wdevadacouk) Android application 1.2 that does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. This is a certificate validation ...