CVE-2014-7089

CVE-2014-7089 concerns the Android app “COMPETITION INFORMATION (com.ear.bilgiyarismasi)” version 0.1, which does not verify X.509 certificates when establishing SSL connections. This missing certificate validation allows a man-in-the-middle to spoof HTTPS servers and exfiltrate or tamper with se...