CVE-2014-7562

The Health Advocate SmartHelp (com.healthadvocate.ui) Android app version 3.6 does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive information via a crafted certificate. Root cause: missing certificate validation during TLS. Impact: pa...