TI-2014-05605 CVE-2014-6766 · GHSA-pc4g-pjrm-j2w6The Afro-Beat (aka com.zero.themelock.tambourine) application 0.2 for Android does not…Priority LOW 24The Afro-Beat (aka com.zero.themelock.tambourine) application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informatio…CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-09-28 · No fix listed CWE-310