CVE-2014-7462

CVE-2014-7462 affects the Android app “The Fashion Story: Neon 90’s” (package com.teamlava.fashionstory39), version 1.5.6.5. The root cause is failure to verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...