Unverified SSL Certificates in iStunt 2 Android App (Version 1.1.2) Allow Man-in-the-Middle Attacks

CVE-2014-7609

The iStunt 2 (aka com.miniclip.istunt2) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Learn more about our Cis Benchmark Audit For Google Android.