CVE-2014-7797

CVE-2014-7797 concerns the Android app “The Thai food” (package com.foods.thaifood) version 1.0, which does not verify X.509 certificates when connecting to SSL servers. This flaw enables man-in-the-middle attackers to spoof servers and potentially exfiltrate sensitive information via a crafted c...