Tripwire researches who conducted the primary study into this flaw have said that,  A video detailing the exploit is given below :

ANDROID VPN VULNERABILITY ALLOWS DATA INTERCEPTION IN PLAIN TEXT   CERT IN   TechWorm - 78