CVE-2014-7003

The Goodwin (com.goodwin.Goodwin) Android app v1.15 does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via crafted certificates. Affected component: SSL certificate validation in the app's network stack. Root cause: missi...