TI-2014-05494 CVE-2014-6655 · GHSA-mrgh-64fv-jvp2The Tortoise Forum (aka org.tortoiseforum.android.forumrunner) application 3.5.16 for…Priority LOW 24The Tortoise Forum (aka org.tortoiseforum.android.forumrunner) application 3.5.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens…CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00271 · Published 2014-09-23 · No fix listed CWE-310