CVE-2014-7592

The FOL Android app (com.desire2learn.fol.mobile.app.campuslife.directory) version 3.0.729.1459 does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The available documents do not spe...