CVE-2014-7723

The CVE-2014-7723 issue affects the Carnegie Mellon Silicon Valley Android app (edu.cmu.sv.mobile) version 0.1, which does not verify X.509 certificates when connecting to SSL servers. The underlying flaw enables MITM attackers to spoof servers and exfiltrate sensitive information via a crafted c...