CVE-2014-6807

CVE-2014-6807 affects the OLA School Android app (com.conduit.app_00f9890a4f0145f2aae9d714e20b273a.app) version 1.2.7.132. The root cause is failure to verify X.509 certificates from SSL servers, which can let attackers perform a man-in-the-middle attack to spoof servers and obtain sensitive info...