CVE-2014-7060

The CVE-2014-7060 entry describes a vulnerability in the Android app Your Tango (com.your.tango) 1.0 where SSL X.509 certificates are not validated. This allows MITM attackers to spoof servers and extract sensitive information via a crafted certificate. The affected component is the app’s SSL/TLS...