CVE-2014-7593

CVE-2014-7593 affects the Android app “The Mr Whippet – Yorkshire Ice” (aka com.appytimes.ice), version 1.1. The vulnerability is a failure to verify X.509 certificates from SSL servers, which allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. ...