CVE-2014-7647

The CVE-2014-7647 entry concerns the BOOKING DISCOUNT (com.wmygoodhotelscom) Android app version 0.1, where SSL server certificate validation is not performed. This allows a man-in-the-middle attacker to spoof servers and potentially obtain sensitive information via a crafted certificate. The doc...