TI-2014-05874 CVE-2014-7040 · GHSA-h882-vv4m-rjj2The UniCredit Investors (aka eu.unicreditgroup.brand.ucinvestors) application 1.0 for…Priority LOW 24The UniCredit Investors (aka eu.unicreditgroup.brand.ucinvestors) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens…CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-16 · No fix listed CWE-310