Threats tagged 'ghsa-j2mc-9j97-fjf4'

The MatchPoint Android app improperly validates TLS certificates due to a TrustManager that accepts any certificate and a permissive hostname validator. The app also permits unencrypted HTTP traffic. This misconfiguration allows an attacker who can intercept network traffic to read and modify communications, including sensitive credentials and personal data.