TI-2014-04532 CVE-2014-5577 · GHSA-73c9-9ggr-pq7rThe AVON Buy & Sell (aka com.AVONBeautyntheRep) application 0.3 for Android does not…Priority LOW 24The AVON Buy & Sell (aka com.AVONBeautyntheRep) application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information…CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00271 · Published 2014-09-09 · No fix listed CWE-310