CVE-2014-7458

The CVE-2014-7458 entry concerns the BloomYou Valentine Android app (package com.bloomyouteam.bloomyou.valentine, version 2.4). The vulnerability is failed TLS/SSL certificate validation: the app does not verify X.509 certificates from SSL servers. This allows an attacker to perform man-in-the-mi...