CVE-2014-7552

CVE-2014-7552 affects the Android app “Zombie Diary” (package com.ezjoy.feelingtouch.zombiediary) version 1.2.2. The root cause is that the app does not validate X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft...