CVE-2014-5623

The CVE-2014-5623 entry concerns the Android app penguinchefshop (package com.freegames.penguinchefshop), version 1.0.1. The root cause is failure to verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via crafted certificates. The...