CVE-2014-7539

CVE-2014-7539 affects the Android app “com.zizizzi” v1.0 (Zhang Zhijun Taiwan Visit). The issue is lack of X.509 certificate verification for SSL servers, allowing MITM attackers to spoof servers and exfiltrate sensitive data. The root cause is improper TLS validation in the app; no remediation o...