The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14980
Reference (s):
- http://packetstormsecurity.com/files/158322/Sophos-Secure-Email-Android-Application-3.9.4-Man-In-The-Middle.html
- https://www.info-sec.ca/advisories/Sophos-Secure-Email.html