CVE-2014-7688

The CVE-2014-7688 entry concerns the Android app Home Improvement (package com.whomeimprovementapp) version 0.1, which does not verify X.509 certificates from SSL servers. This flaw allows a man-in-the-middle attacker to spoof servers and read sensitive information sent over TLS, due to missing c...