Ana · Ana App For Android · CVE-2015-5666
**Name of the Vulnerable Software and Affected Versions**
ANA App for Android versions 3.1.1 and earlier
ANA App for iOS versions 3.3.6 and earlier
**Description**
The issue concerns the failure to verify SSL certificates. This could potentially allow for man-in-the-middle attacks. No information is provided about the estimated number of affected devices or real-world incidents.
**Recommendations**
For ANA App for Android versions 3.1.1 and earlier, update to a version that verifies SSL certificates.
For ANA App for iOS versions 3.3.6 and earlier, update to a version that verifies SSL certificates.