CVE-2014-7075

CVE-2014-7075 affects the HAPPY Android app (com.tw.knowhowdesign.sinfonghuei); the flaw is failure to verify X.509 certificates from SSL servers in version 2.0, enabling potential man-in-the-middle disclosure of sensitive data. The NVD entry links this to MEDIUM severity (CVSS v2: AV:A/AC:M/Au:N...