TI-2014-05742 CVE-2014-6906 · GHSA-78hv-gm59-2v8mThe Loli Chocolate Cake (aka com.alison.kang.chocolatecake) application 1.0.0 for Android…Priority LOW 24The Loli Chocolate Cake (aka com.alison.kang.chocolatecake) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitiv…CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-04 · No fix listed CWE-310