CVE-2014-7515

The CVE-2014-7515 pertains to the Android app “Bail Bonds” (com.onesolutionapps.chadlewisbailbondsandroid) version 1.1, where the SSL/TLS implementation does not verify X.509 certificates. This allows a man-in-the-middle attacker to spoof servers and exfiltrate sensitive data via a crafted certif...