Security Advisory
CVE-2013-7201
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.