TI-2017-01409 CVE-2017-2104 · GHSA-jjfq-8vq7-78rxInformation disclosure in K-Opticom Corporation Business LaLa Call App for AndroidPriority LOW 28The Business LaLa Call App for Android 1.4.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certi…CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00667 · Published 2017-04-28 · No fix listed CWE-200