CVE-2014-7393

The CVE-2014-7393 entry concerns the Android app 100 Beauty Tips (com.ww100BeautyTipsApp) version 1.1, where SSL/TLS connections do not verify X.509 certificates. This creates susceptibility to man-in-the-middle attacks that can spoof servers and leak sensitive information via a crafted certifica...