CVE-2014-7006

CVE-2014-7006 affects the HydFM (com.apheliontechnologies.hydfm) Android app v1.1.9. The root cause is lack of X.509 certificate verification for SSL connections, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information; CVSSv2 base score 5.4 (Medium). Exploitati...