CVE-2014-5969

The healthylifestyle Android app (com.alek.healthylifestyle) version 1.2.2 does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via crafted certificates. Reported as CVE-2014-5969. The public records describe i...