The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation.
- http://packetstormsecurity.com/files/158322/Sophos-Secure-Email-Android-Application-3.9.4-Man-In-The-Middle.html
- https://github.com/Live-Hack-CVE/CVE-2020-14980