CVE-2014-7317

The CVE-2014-7317 entry concerns the Android app Aloha Bail Bonds (com.onesolutionapps.alohabailbondsandroid) version 1.1, which does not verify X.509 certificates from SSL servers. The underlying issue is a failure in TLS certificate validation that enables man-in-the-middle attackers to spoof s...