CVE-2017-11706

The CVE concerns the Boozt Fashion Android app prior to version 2.3.4. A remote attacker could read login credentials by sniffing network traffic due to the absence of SSL on login, as described in multiple sources. The vulnerability is tied to insecure credential transmission rather than a clien...