CVE-2014-7616

CVE-2014-7616 affects the Android version of the Physics Forums app (3.9.22). The vulnerability is that the app does not verify X.509 certificates when establishing TLS connections, enabling potential MITM attackers to spoof SSL servers and access sensitive information via a crafted certificate. ...