CVE-2014-5905

The Grocery List - Tomatoes (aka com.meucarrinho) Android app 5.1.4 does not verify SSL certificates, allowing MITM attackers to spoof servers and access sensitive data via crafted certificates. Root cause: failure to validate X.509 server certificates during TLS connections. Impact: disclosure o...

CVE-2014-5905: Undefined Security Weakness

The Grocery List - Tomatoes aka com.meucarrinho application 5.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...