CVE-2014-7518

CVE-2014-7518 describes a vulnerability in the Bowl Expo 2014 Android app (package com.coreapps.android.followme.bowlexpo14), version 6.1.1.5, where the app does not verify X.509 certificates from SSL servers. This certificate validation failure enables man-in-the-middle attackers to spoof server...