CVE-2014-6688

The Voices.com Android app (com.voices.voices) version 1.5 does not verify X.509 certificates from SSL/TLS servers, allowing MITM attackers to spoof servers and read sensitive data via a crafted certificate. According to CVE-2014-6688 data, this yields a Medium impact with partial confidentiality...