CVE-2014-7012

The Coffee Inn (lt.lemonlabs.android.coffeeinn) Android app 2.0.1 does not verify X.509 certificates for TLS connections, enabling MITM attackers to spoof SSL servers and obtain sensitive information via a crafted certificate. Connected sources confirm this behavior; no remediation details are pr...