CVE-2014-5905

The Grocery List - Tomatoes (aka com.meucarrinho) Android app 5.1.4 does not verify SSL certificates, allowing MITM attackers to spoof servers and access sensitive data via crafted certificates. Root cause: failure to validate X.509 server certificates during TLS connections. Impact: disclosure o...