TI-2014-06350 CVE-2014-7643 · GHSA-65v4-qvr3-xm95The C.R.Priority LOW 24The C.R. Group (aka com.c.r.group) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted…CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-21 · No fix listed CWE-310