CVE-2014-7670

The CVE pertains to The Motor Town: Machine Soul Free Android app (com.alawar.motortownfree) version 1.1. It does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information with crafted certificates. Impact is described as partial con...