CVE-2014-7803

CVE-2014-7803 affects the Android app Woodward Bail (com.onesolutionapps.woodwardbailandroid), version 1.1, where TLS X.509 certificate validation is not performed. This enables MITM attackers to spoof SSL servers and exfiltrate sensitive data via a crafted certificate (base CVSS v2 score 5.4).