CVE-2014-5686

CVE-2014-5686 affects the Runtastic Me Android app (com.runtastic.android.me.lite) version 1.0.2; it does not verify X.509 certificates from SSL servers, enabling potential MITM with crafted certificates. The NVD entry lists a CVSSv2 base score of 5.4 (Medium) with partial impact to confidentiali...