CVE-2014-7056

CVE-2014-7056 affects the Android application “The Yeast Infection” (package com.wyeastinfectionapp) version 0.1. The issue is that the app does not verify X.509 certificates when connecting to SSL servers, which enables MITM attackers to spoof servers and potentially obtain sensitive information...