TI-2014-05535 CVE-2014-6696 · GHSA-qr5v-8q9r-729fThe Candy Girl Party Makeover (aka com.bearhugmedia.android_candygirlparty) application…Priority LOW 24The Candy Girl Party Makeover (aka com.bearhugmedia.android_candygirlparty) application 1.0.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers a…CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00271 · Published 2014-09-24 · No fix listed CWE-310