Men’s Wearhouse offers an Android app called Perfect Fit which allows customers to manage their accounts, track their rewards points, receive coupons, etc. As a customer myself, I already had an account with them and decided to review the requests the app was making while logging in and accessing my information. In doing so, I immediately identified a flaw in their web service’s authentication/session management that exposed the personal information of all of their customers with Perfect Fit accounts.
more here...........http://randywestergren.com/mens-wearhouse-perfect-fit-app-vulnerability-exposing-customer-information/
more here...........http://randywestergren.com/mens-wearhouse-perfect-fit-app-vulnerability-exposing-customer-information/