CVE-2014-5829

CVE-2014-5829 affects the Hobby Lobby Stores Android app (package com.hobbylobbystores.android) version 2.1.9, where SSL/TLS server certificates are not verified. This weakness allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate, compromising confiden...