CVE-2014-7313

The CVE concerns The One You Fitness Android app (package com.app_oneyou.layout) version 1.399, which does not verify X.509 certificates from SSL servers. Root cause: TLS certificate validation is not performed, enabling man-in-the-middle attackers to impersonate servers and potentially obtain se...