CVE-2017-14487

What is affected: OhMiBod Remote app for Android and iOS (Android/iOS platforms) using the OhMiBod API server. Vulnerability details: An attacker can impersonate a user by sniffing network traffic for search responses and then editing the username, user_id, and token fields stored in data/data/co...