CVE-2014-6637

The CVE-2014-6637 entry concerns the Facebook Facts (com.wFacebookFacts) Android app 0.1, which does not verify X.509 certificates when establishing TLS connections. This improper certificate validation enables man-in-the-middle attackers to spoof SSL servers and exfiltrate sensitive information ...