CVE-2015-5666

CVE-2015-5666 affects the ANA App family: Android 3.1.1 and earlier, and iOS 3.3.6 and earlier. The root issue is that the apps do not verify SSL server certificates, enabling potential Man-in-the-Middle attacks and eavesdropping on encrypted traffic. Concrete details from the connected sources c...