CVE-2014-7596

The CVE-2014-7596 entry concerns the Paramore (uk.co.pixelkicks.paramore) Android app. It does not verify X.509 certificates from SSL servers in version 2.3.4, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD-recorded CVSS v2 vector indi...