Unverified X.509 Certificates Vulnerability in The Daily Green (aka it.opentt.blog.dailygreen) Application 2014.07 dlygrn for Android

Unverified X.509 Certificates Vulnerability in The Daily Green (aka it.opentt.blog.dailygreen) Application 2014.07 dlygrn for Android

CVE-2014-7800 · MEDIUM Severity

AV:A/AC:M/AU:N/C:P/I:P/A:P

The Daily Green (aka it.opentt.blog.dailygreen) application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Learn more about our Cis Benchmark Audit For Google Android.