CVE-2014-7524

The Bed and Breakfast Android app (package com.wbedandbreakfastapp, version 0.1) is vulnerable because it does not verify X.509 certificates when establishing SSL/TLS connections. This allows a man-in-the-middle to spoof servers and potentially exfiltrate sensitive data via a crafted certificate....