CVE-2014-5595

The actionpuzzlefamily for Kakao aka com.com2us.actionpuzzlefamily.kakao.freefull.google.global.android.common application 1.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

CVE-2014-5595

The CVE-2014-5595 entry affects the Android app Kakao ActionPuzzleFamily (package com.com2us.actionpuzzlefamily.kakao.freefull.google.global.android.common) version 1.4.3. The underlying flaw is failure to verify X.509 TLS certificates when connecting to SSL servers, enabling man-in-the-middle at...