A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclosure.