CVE-2014-7122

CVE-2014-7122 affects the Lansing State Journal Print Android app (package: com.lansingjournal.android.prod, version 6.7). The flaw is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via crafted cert...