CVE-2014-5819

The CVE-2014-5819 entry concerns the Android app “PHONE for Google Voice & GTalk” (com.moplus.gvphone) v1.0, where SSL/TLS server certificate validation is not performed. As described in connected sources, this weakness allows man-in-the-middle attackers to spoof servers and obtain sensitive info...