CVE-2014-6908

The CVE-2014-6908 entry concerns the Forum IC app (com.tapatalk.forumimmigrercom) for Android, version 3.3.12, which does not verify X.509 certificates from SSL servers. This trust failure allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifica...